The MSI Radix AXE6600 router firmware version v781521 contains an OS command injection vulnerability in its TelnetSSH function, which is used for SSH configuration. This flaw allows remote attackers to inject and execute arbitrary system commands on the device, resulting in full root-level control. The vulnerability is exploitable remotely without requiring privileges or user interaction, making it highly critical. The CVSS 4.0 base score is 9.3, reflecting its severity and ease of exploitation. There is no vendor advisory or patch information available at this time.

Successful exploitation grants remote attackers root privileges on the affected device, enabling full control over the system. This can lead to unauthorized configuration changes, data compromise, or use of the device in further attacks. The vulnerability does not require authentication or user interaction, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict SSH access to trusted networks and users only to reduce exposure. Monitor for unusual SSH activity and consider disabling SSH configuration interfaces if feasible.