Eg3661M
Monthly
OS command injection in the Baicells EG3661M LuCI web interface (firmware BaiCE_BQ6_2.0.5.3_NA) allows an authenticated remote attacker with administrative credentials to execute arbitrary operating system commands by manipulating the MaxHops, Timeout, or Size arguments passed to /cgi-bin/luci. Full confidentiality, integrity, and availability compromise of the device is achievable upon exploitation. A public proof-of-concept exploit is available on GitHub, and no vendor patch exists - the vendor did not respond to responsible disclosure, leaving affected deployments with no official remediation path.
OS command injection in the Baicells EG3661M LuCI web interface (firmware BaiCE_BQ6_2.0.5.3_NA) allows an authenticated remote attacker with administrative credentials to execute arbitrary operating system commands by manipulating the MaxHops, Timeout, or Size arguments passed to /cgi-bin/luci. Full confidentiality, integrity, and availability compromise of the device is achievable upon exploitation. A public proof-of-concept exploit is available on GitHub, and no vendor patch exists - the vendor did not respond to responsible disclosure, leaving affected deployments with no official remediation path.