The Neterbit NW-431F Router's network diagnosis (ping) module improperly sanitizes user-supplied input in the IP address field, leading to an OS command injection vulnerability (CVE-2025-67447). An attacker can inject arbitrary commands that the system executes with web server privileges, potentially compromising the device. This vulnerability affects firmware version 20241014-IR03 and earlier. The CVSS 3.1 base score is 9.8, reflecting critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and the device is not a cloud service, so remediation depends on vendor updates or other mitigations.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the router with web server privileges, potentially leading to full device compromise, unauthorized access, data disclosure, or disruption of network services. The vulnerability requires no authentication and no user interaction, making it highly exploitable remotely. The critical CVSS score reflects the severe impact on confidentiality, integrity, and availability of the affected device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the router's management interface to trusted networks only and consider disabling the network diagnosis (ping) feature if possible to reduce exposure. Monitor vendor communications for updates and apply patches promptly once available.