Linksys RE6250 Arbitrary Command Execution

The vulnerability of the setDeviceName function /goform/setDeviceName of Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers lies in the lack of measures to neutralize special elements during the processing of the DeviceName parameter. Exploiting this vulnerability allows an attack...