Versions of INEA ME RTU firmware before 3.36 are vulnerable to OS command injection, which could allow an malicious user to remotely execute arbitrary code.
inea me_rtu_firmware