Remote Code Execution (RCE)

Allows remote attacker to execute arbitrary OS shell commands on a target system.

Core Principles & Analysis

• The 2021 Log4Shell flaw exposed millions of Java servers to it.
• Grants attackers full control of the compromised host.
• Reduced through input validation, sandboxing, and rapid patching.

Specifications & Metrics

• CVE: CWE-94
• IMPACT: Critical