All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization.
CWE-78, NVD-CWE-Other, CWE-77