CVE-2024-28026

MC Technologies MC LR Router 2.10.5 contains three authenticated OS command injection flaws in the web interface I/O configuration (io) endpoint. The decompiled code shows input from attacker-controlled parameters btn1, out1, and timer1 being unsafely embedded into shell commands executed with ro...