← All KD5FMU repositories

DTMF-Shutdown-Reboot

https://github.com/KD5FMU/DTMF-Shutdown-Reboot · Shell · 2 findings · Review date 2026-07-11

Executive Summary

2 finding(s) including 2 critical. Bare reboot/shutdown scripts for DTMF mapping with no authentication.

![Internet Monitor Logo](https://github.com/KD5FMU/DTMF-Shutdown-Reboot/blob/main/reboot-shutdown2.png)

Summary Counts

2
Critical Security
0
High Security
0
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
0
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
DTMF-SR-001 Critical Security reboot.sh 8-11 Immediate reboot on DTMF trigger
DTMF-SR-002 Critical Security shutdown.sh 8-11 Immediate shutdown on DTMF trigger

Critical Security Issues

[DTMF-SR-001] Immediate reboot on DTMF trigger

reboot.sh : 8-11

reboot.sh executes /sbin/reboot with no authentication.

Impact: Server reboot by any DTMF sender.

[DTMF-SR-002] Immediate shutdown on DTMF trigger

shutdown.sh : 8-11

shutdown.sh executes /sbin/shutdown now with no authentication.

Impact: Full node power-off by any DTMF sender.

Recommended Fix Priority

  1. Address all Critical findings before production deployment