CyberRota Analysis
AI-GeneratedAn OS command injection vulnerability exists in Archer VX800v v1, stemming from inadequate input sanitization of the domain name parameter. An adjacent attacker with access to the HTTP interface can exploit this flaw to inject shell metacharacters, potentially leading to arbitrary code execution with root privileges and complete device compromise. Organizations using this device should prioritize remediation to mitigate the risk of unauthorized access and control.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface can modify the parameter to inject shell metacharacters, resulting in arbitrary code execution with root privileges. Successful exploitation may allow remote code execution and complete compromise of the device.
Related CVEs
Other vulnerabilities affecting the same vendor(s)