This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
CWE-94 Improper Control of Generation of Code ('Code Injection')