Description
The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system-s ping command. An attacker can inject arbitrary OS commands, which will be executed with the privileges of the web server.
CVSS 9.8EPSS 1.026%Risk 1.07
View source- Published
- 2026-06-04 18:16:27
- Affected versions
- cannotmatch
- Type
- Firmware
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H