twonky_command.cgi Root Command Execution

The vulnerability of the twonkycommand.cgi component of the Belkin N750 router software is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges using specially crafted HTTP...

Belkin N750 Arbitrary Command Execution Vulnerability

Belkin N750 is a wireless router product. The Belkin N750 version 1.10.22 suffers from a security vulnerability in its implementation, which allows an unauthenticated remote user to execute arbitrary commands with root privileges by sending an HTTP request to twonkycommand.cgi...

CVE-2018-1143: Improper Neutralization of Special Elements used in an OS Command

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to twonkycommand.cgi...