EUVD-2026-30044
GHSA-pvcc-fj7g-vm23
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize user-supplied input. An authenticated user with permission to configure NTP settings can inject arbitrary system commands through crafted input fields. These commands are executed with elevated privileges, leading to potential full system compromise.
AnalysisAI
Command injection in U-SPEED AC1200 Gigabit Wi-Fi Router (Model T18-21K) V1.0 allows authenticated administrators to execute arbitrary system commands with elevated privileges through the Network Time Protocol (NTP) configuration interface. The vulnerability stems from insufficient input sanitization in NTP settings fields, enabling full system compromise. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all U-SPEED AC1200 Model T18-21K V1.0 devices in production and document their network locations and administrative access controls. Within 7 days: Restrict administrative access to affected routers through network segmentation and enhanced monitoring of NTP configuration changes; contact U-SPEED support to confirm patch availability timeline and request security guidance. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today