Pbss

**Name of the Vulnerable Software and Affected Versions** Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656 **Description** A remote command injection flaw exists in the `/send order.cgi` endpoint. The issue occurs when the `mac` argument is manipulated, allowing an attacker to execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.