This vulnerability affects Comfast CF-WR631AX V3 firmware versions 2.7.0.0 to 2.7.0.8. The issue lies in the system_wl_upload_pic_file function within the FastCGI backend (/usr/bin/webmgnt), where manipulation of the filename argument leads to OS command injection. This allows an unauthenticated remote attacker to execute arbitrary commands on the device. The vulnerability has a CVSS 4.0 score of 9.3 (critical) indicating high impact and ease of exploitation. The vendor was contacted but did not provide any response or patch. No official remediation or fix is currently documented.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary operating system commands on the affected device, potentially leading to full compromise of the router. This can result in unauthorized control, data interception, or disruption of network services. The vulnerability is critical due to its remote, unauthenticated nature and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interface, disabling remote management if possible, or isolating the device until a patch is available. Monitor vendor channels for updates and apply official patches immediately once released.