[leptons]

It isn't really a vulnerability. You have to already have full access to the device to use the undocumented commands reported in the article.