Threats tagged 'ghsa-vw5w-mm6p-3m38'

A critical OS command injection vulnerability exists in the add_expmac function of the Web Administration Interface component in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This vulnerability allows remote attackers with low privileges to execute arbitrary operating system commands by manipulating the 'mac' argument. Public exploit code is available, and the vendor has not responded to disclosure attempts.