Teltonika RutOS ipsec status logread command injection

Post-authentication OS command injection in Teltonika RutOS 00.07.06.21 RUT2XX / RUT200; RUT9XX byte-identical ipsec.lua. GET /api/ipsec/status/ passes the URL-decoded sid into logread -e '-c|' without shell quoting; vuci.util.exec runs /bin/sh -c and returns stdout in JSON .data.logs reflective...