MC Technologies MC LR Router version 2.10.5 contains three OS command injection vulnerabilities in its web interface I/O configuration functionality. These vulnerabilities allow an authenticated attacker to execute arbitrary commands on the device by sending specially crafted HTTP requests. The flaw specifically involves the 'out1' parameter, which is improperly handled and passed to a system command without adequate sanitization.