The vulnerability allows a remote malicious user to authenticate to the SSH service with root privileges through a hidden hard-coded account.
bosch nexo-os