← All KD5FMU repositories

DTMF-Reboot-and-Shutdown

https://github.com/KD5FMU/DTMF-Reboot-and-Shutdown · Shell · 2 findings · Review date 2026-07-11

Executive Summary

2 finding(s) including 1 critical. Installs unauthenticated DTMF *992 reboot and *993 shutdown commands.

This is some script files that will allow you to Reboot or Gently Shutdown your ASL3 Node via DTMF

Summary Counts

1
Critical Security
1
High Security
0
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
0
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
DTMF-RS-001 Critical Security reboot-shutdown-dtmf.sh 290-295 DTMF *992/*993 reboot and shutdown without authentication
DTMF-RS-002 High Security reboot_server.sh 8-11 Reboot/shutdown scripts run as root with no ACL

Critical Security Issues

[DTMF-RS-001] DTMF *992/*993 reboot and shutdown without authentication

reboot-shutdown-dtmf.sh : 290-295

Adds 992=cmd,reboot-node.sh and 993=cmd,shutdown-node.sh to rpt.conf.

Impact: Any radio user can reboot or power off the AllStar server.

High Security Issues

[DTMF-RS-002] Reboot/shutdown scripts run as root with no ACL

reboot_server.sh : 8-11

Immediately runs /sbin/reboot after logging.

Impact: Immediate server reboot on DTMF trigger.

Recommended Fix Priority

  1. Address all Critical findings before production deployment