CyberRota Analysis
AI-GeneratedA command injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library in LB-link Router AC2100_AZ3 V1.0.4 allows attackers to exploit insufficient input validation and execute arbitrary operating system commands. This could lead to unauthorized access or control over the affected device. Organizations using this router model should prioritize remediation to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An attacker can exploit this vulnerability by injecting specially crafted shell metacharacters or payloads into the vulnerable parameter, resulting in the execution of arbitrary operating system commands.