CVE-2011-5010

The Ctek SkyRouter 4200 and 4300 series routers are vulnerable to a remote arbitrary command execution flaw in the apps/a3/cfg_ethping.cgi component. The root cause is a failure to adequately sanitize user-supplied input, specifically allowing shell metacharacters in the PINGADDRESS parameter dur...