Threats tagged 'ghsa-x36q-c7hp-qvrg'

Cudy TR3000 routers running firmware versions before 2.5.42 have a remote code execution vulnerability. Authenticated administrators can exploit this flaw by importing a malicious OpenVPN client configuration containing specially crafted tls-verify or ipchange directives. These directives bypass an incomplete denylist and allow execution of root commands when the router connects to the attacker-controlled VPN endpoint. This vulnerability enables full control over the device with high impact on confidentiality, integrity, and availability.