OS Command Injection in R-SOFT DMS OCR Module

Successful exploitation can result in arbitrary operating system command execution with root privileges on the affected system. This gives an attacker full compromise potential over the host, including modification or destruction of data, installation of additional tooling, persistence, lateral movement from the compromised server, and disruption of OCR or broader document management operations.

If immediate patching is not possible, restrict access to OCR functionality to only trusted users, minimize the number of accounts permitted to upload files and trigger OCR jobs, and reduce privilege exposure of the OCR execution environment wherever operationally feasible. Additional defensive measures include hardening or isolating the OCR processing host, reviewing SSH-mediated command execution paths, and implementing strict server-side validation and escaping for file path inputs before they reach any shell context. The available information also indicates that the standard web upload flow in the current infrastructure applies URL encoding that neutralizes injection in that path, but this should not be relied upon as a complete fix.

Upgrade R-SOFT DMS to a fixed release. The issue was corrected in v3.19-2862 and v3.17-2580. Remediation should include ensuring that OCR-related command execution paths no longer pass user-controlled file paths to shell commands without strict validation or safe argument handling.