CVE-2017-9333

CVE-2017-9333 is a remote code execution vulnerability in OpenWebif 1.2.5, affecting products that bundle OpenWebif, such as set-top boxes. It allows an attacker to execute arbitrary code by tricking a user into installing a malicious package from an attacker-controlled URL via the CallOPKG function. This vulnerability has a high CVSS score of 8.8, indicating a critical risk with high impact on confidentiality, integrity, and availability, requiring user interaction for exploitation. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.