[helper]

How do you get privilege escalation from shell escape sequences?

[vetrom]

It would be a stretch, but lets say you're driving some poorly thought out automation over a pty that has some sort of terminal emulator attached that has any sort of output-changeable answerback-like sequence.

The pty part is important because some software will assume you're running interactive if it sees that its STDIN/OUT is a pty, and change its functionality accordingly.

[jlgaddis]

Crazier shit has happened. In my case, pretty much everything on these devices runs as root so it may very well be possible.