Drmnsamoliu

A vulnerability related to improper neutralization of special elements used in an OS command is found in the IP block functionality, allowing remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors.

The issue allows an attacker to gain root access to the system via UART pins without any restrictions, leading to full system compromise and potential disclosure of user communications.

A default weak password in a privileged account can be exploited to enable the TELNET service through the web interface, allowing root login without a password. This can lead to full system compromise and the disclosure of user communications. The `foxconn` account has an 8-character lowercase alphabetic default password.