ProLink PRC2402M Command Injection Vulnerability (CNVD-2021-68447)

ProLink PRC2402M is a router from ProLink Singapore. A command injection vulnerability exists in the set_sys_cmd function in the adm.cgi binary file of ProLink PRC2402M 1.0.18 and prior versions. An attacker could exploit this vulnerability to cause command injection by passing the command parameter value directly to the system.