Klamm9

An OS command injection issue exists in the TR-069 / CWMP management interface. This occurs because of insufficient input validation and sanitization of parameters, which allows crafted input to be executed as system-level commands. Exploitation requires TR-069 to be enabled and the ability to influence ACS-delivered commands, such as by compromising or controlling an ACS server. Successful exploitation may allow arbitrary command execution with root privileges, leading to a complete compromise of the device.

An OS command injection issue exists due to insufficient input sanitization of the domain name parameter. An adjacent attacker with access to the HTTP interface can inject shell metacharacters into the `domain name` parameter, leading to arbitrary code execution with root privileges and complete compromise of the device.

An issue in the HTTP authentication component allows for privilege escalation. Improper handling of user-controlled input enables the injection of newline characters into internally constructed configuration data. Consequently, an authenticated user with sufficient privileges can modify account settings to obtain elevated administrative privileges.