An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The flaw is in the SetDynamicDNSSettings function where attacker-controlled parameters are used unsafely in system commands, allowing remote arbitrary command execution without authentication.