Xinshunyang

The issue is related to insufficient validation of user-supplied input in the web-based management interface of the affected devices. This could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying Linux operating system of an affected device. To exploit this issue, an attacker would need to have valid Administrator credentials on the affected device. The attacker could exploit the issue by sending malicious input to an affected device, potentially allowing the execution of arbitrary commands.