The vulnerability in the Acer Connect M6E 5G Portable WiFi Router involves the ai_cmd utility, which executes with root permissions and improperly handles socket input by piping it directly to the popen() function. This design flaw enables unauthenticated attackers to execute arbitrary commands with root privileges remotely. The issue is categorized as CWE-489, indicating the presence of active debug code that should have been removed or disabled. The CVSS 4.0 vector indicates the attack requires adjacent network access but no privileges or user interaction, with high impact on confidentiality, integrity, and availability.

Successful exploitation allows unauthenticated attackers with adjacent network access to execute arbitrary commands as root on the affected device. This can lead to full system compromise, including unauthorized access, data manipulation, and disruption of device functionality. The vulnerability poses a significant risk to the security and stability of the affected router.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device’s management interfaces to trusted users only and monitor for unusual activity. Avoid exposing the device to untrusted networks. Do not rely on generic mitigations as the vulnerability allows unauthenticated root command execution.