CPE
A command injection vulnerability in the pppoe_wrapper daemon on Amlogic-based Android TV boxes allows local attackers to achieve root privilege escalation by sending malicious payloads to a world-writable AF_UNIX socket.