CVE-2024-53939: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The /cgi-bin/luci/admin/opsw/Dualfrequnapple endpoint is vulnerable to command injection through the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute arbitrary commands on t...

CVE-2024-53939

The Victure RX1800 WiFi 6 Router (hardware 1.0, software EN_V1.0.0_r12_110933 ) contains a command injection vulnerability. The /cgi-bin/luci/admin/opsw/Dual_freq_un_apple endpoint fails to properly neutralize special elements in the name parameters for both 2.4 GHz and 5 GHz frequencies. An atta...