Klamm9

**Name of the Vulnerable Software and Affected Versions** Archer VX1800v version v1 **Description** An OS command injection issue exists in the TR-069 / CWMP management interface. This occurs because of insufficient input validation and sanitization of parameters, which allows crafted input to be executed as system-level commands. Exploitation requires TR-069 to be enabled and the ability to influence ACS-delivered commands, such as by compromising or controlling an ACS server. Successful exploitation may allow arbitrary command execution with root privileges, leading to a complete compromise of the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Archer VX800v version 1 **Description** An OS command injection issue exists due to insufficient input sanitization of the domain name parameter. An adjacent attacker with access to the HTTP interface can inject shell metacharacters into the `domain name` parameter, leading to arbitrary code execution with root privileges and complete compromise of the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Archer VX1800v version 1 **Description** An issue in the HTTP authentication component allows for privilege escalation. Improper handling of user-controlled input enables the injection of newline characters into internally constructed configuration data. Consequently, an authenticated user with sufficient privileges can modify account settings to obtain elevated administrative privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.