EIP-2026-101154

This exploit demonstrates a command injection vulnerability in Allied Telesis AT-MCF2000M 3.0.2 via the 'File Show Filesystem' command, allowing an authenticated attacker to execute arbitrary commands and gain a root shell by injecting shell metacharacters (e.g., |, &, ;). The PoC shows how to spawn a telnetd service on port 30 with a root shell.