The Yamaha wireless LAN router NWR100 contains an OS command injection vulnerability that allows an attacker to execute arbitrary operating system commands by sending a specially crafted request. This vulnerability has a critical severity with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.