Product
A remote OS command injection vulnerability exists in Tiandy Easy7 Integrated Management Platform up to version 7.17.0, allowing attackers to execute arbitrary commands by manipulating the 'File' argument in the '/Easy7/apps/WebService/ImportSystemConfiguration.jsp' file, potentially leading to full system compromise.