[K0balt]

But this makes the access persistent, and allows the removal of all evidence of the initial penetration, survives OS patching, vulnerability scanning, etc.

[adrians1]

Agree, it's a serious vulnerability, but it's not exploitable remotely.