ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68528)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the pppoe_username, pppoe_passwd, and pppoe_servicename parameters in the pppoe function failing to properly filter the construct command special characters, commands, etc. An attacker could use this vulnerability to cause arbitrary command execution.