Threats tagged 'ghsa-r939-4h6w-w7j6'

The WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) has an OS command injection vulnerability in its firewall.cgi binary. This flaw affects five request handlers that do not properly validate input, allowing attackers to inject arbitrary shell commands. The injected commands can persist in NVRAM and execute on subsequent firewall.cgi requests. This vulnerability has a high severity with a CVSS score of 9.3, indicating critical impact.