CVE-2026-111461: SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Exposure requires the SMS management functionality to be enabled and configured on an affected OnCell G3150A-LTE Series device. Devices without that functionality enabled and configured are not identified as exposed by the available information.
What does an attacker need to exploit the vulnerability?
The attacker must be remote and have the required privileges for the SMS management functionality. The issue is caused by insufficient validation of SMS management input before it reaches system().
What is the impact of successful exploitation?
A successful attacker can execute arbitrary commands on the affected device.