CyberRota Analysis
AI-GeneratedThe Comfast CF-N1-S firmware version 2.6.0.1 and CF-WR630AX (2024-01-30 build) are vulnerable due to improper sanitization of the display_name parameter in the update_interface_png SET handler, allowing remote authenticated attackers to inject arbitrary commands. This vulnerability can lead to unauthorized command execution with root privileges, posing a significant risk to the integrity and security of affected devices. Organizations using these specific firmware versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET handler in /usr/bin/webmgnt fails to sanitize the display_name parameter. User-controlled input is concatenated via sprintf() into the unquoted shell command `/etc/rrd/graphinterface %s %s` and executed by system() with root privileges. A remote authenticated attacker can inject arbitrary commands