The vulnerability of the remove_profile() function at the /cgi-bin/glc endpoint of the modem.so component of the GL.iNet GL-MT3000 router software allows a intruder to inject arbitrary commands.

The vulnerability of the removeprofile function at the /cgi-bin/glc endpoint of the modem.so component of the GL.iNet GL-MT3000 router software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to inject arbitrary commands remotely...