ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68526)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the h_time_zone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can be exploited to cause arbitrary command execution. An attacker could use this vulnerability to cause arbitrary command execution.