EIP-2026-104691

This exploit demonstrates an authenticated arbitrary content injection vulnerability in ABB Cylon Aspect's webServerDeviceLabelUpdate.php script. By sending a large payload via the 'deviceLabel' POST parameter, an attacker can overwrite the /usr/local/aam/etc/deviceLabel file, leading to a denial of service (DoS).