Threats tagged 'ghsa-vfcg-vh6j-gg8j'

KAON AR2140 router firmware versions prior to 4.2.16 contain a shell command injection vulnerability exploitable via crafted requests to certain endpoints. Exploitation requires administrative portal access. The vulnerability allows an attacker with high privileges to execute arbitrary commands on the device, impacting confidentiality, integrity, and availability.