Finding a command injection vulnerability in my smart thermostat (CVE-2023-4212) · HackerTrans