CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the CGI interface of COMFAST CF-N1-S version 2.6.0.1, allowing for OS command injection through manipulation of the 'ssid' argument in the configuration settings. This flaw enables remote attackers to execute arbitrary commands on the affected device, posing significant risks to system integrity and confidentiality. Organizations using this product should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.