Command Injection Vulnerability in Roon Labs' Roon Server 2021-05-18 and Later Versions

CVE-2021-28811 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later

Learn more about our Cis Benchmark Audit For Server Software.