The ‘Weather Service’ feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the ‘Add new weather data…
Link: http://feeds.security-database.com/~r/Last100Alerts/~3/644CICsJBT4/detail.php