Three OS command injection vulnerabilities exist in the web interface I/O configuration functionality of MC Technologies MC LR Router version 2.10.5. These vulnerabilities allow an authenticated attacker to execute arbitrary commands by sending a specially crafted HTTP request that manipulates the 'btn1' parameter. The vulnerabilities affect the router's web interface and require authentication to exploit.