The vulnerability of the sub_4256CC() function in TP-Link TL-WPA8630 router software allows a hacker to execute arbitrary code.

The vulnerability of the sub4256CC function in TP-Link TL-WPA8630 router software lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-57357: Improper Neutralization of Special Elements used in an OS Command

An issue in TPLINK TL-WPA 8630 TL-WPA8630USV22.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub4256CC, which allows command injection by injecting 'devpwd'...