Finding a command injection vulnerability in my smart thermostat (CVE-2023-4212) | Hacker News Reader