CyberRota Analysis
AI-GeneratedThe Archer C20 v6 firmware's web management interface is vulnerable to OS command injection due to inadequate input validation during WAN-related configuration operations. This flaw allows authenticated administrators to execute arbitrary system commands, potentially leading to full device compromise and jeopardizing the confidentiality, integrity, and availability of the device and its network traffic. Organizations using this firmware should prioritize remediation to protect their network infrastructure from potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting in full device compromise. Successful exploitation may allow arbitrary command execution with elevated privileges, compromising the confidentiality, integrity, and availability of the affected device and network traffic passing through it.
Related CVEs
Other vulnerabilities affecting the same vendor(s)