A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 in the prog.cgi and rc binaries. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP requests to execute arbitrary commands on the device. The vulnerability arises because user-supplied IP address values are stored in NVRAM and later used unsanitized in shell commands.