Vagebondcur

**Name of the Vulnerable Software and Affected Versions** Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below **Description** A command injection issue exists in the web management interface's ping and traceroute functionality of the Nexxt Solutions NCM-X1800 Mesh Router. The application does not properly sanitize user input in the `Ping host text` parameter before passing it to the underlying system command. This allows authenticated attackers to inject and execute arbitrary shell commands as the root user via the `/web/um ping set.cgi` endpoint. **Recommendations** Versions prior to UV1.2.7 are affected. Update to version UV1.2.7 or later to resolve this issue.

**Name of the Vulnerable Software and Affected Versions** Nexxt Solutions NCM-X1800 Mesh Router firmware versions prior to UV1.2.7 **Description** Nexxt Solutions NCM-X1800 Mesh Router firmware contains an authenticated command injection issue in the firmware update feature. The `/web/um fileName set.cgi` and `/web/um web upgrade.cgi` API endpoints do not properly sanitize the `upgradeFileName` parameter. This allows authenticated attackers to execute arbitrary OS commands on the device, potentially leading to remote code execution. **Recommendations** Update Nexxt Solutions NCM-X1800 Mesh Router firmware to version UV1.2.7 or later.