Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.Referenceshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-261-01