Shaletian

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This issue is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this, an attacker would need to have valid administrative credentials on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda CP7 versions V11.10.00.2211041403 and earlier Tenda CP3 v.10 versions V20220906024 2025 and earlier Tenda IT7-PCS versions V2209020914 and earlier Tenda IT7-LCS versions V2209020914 and earlier Tenda IT7-PRS versions V2209020908 and earlier **Description** The issue is related to command injection, which can allow a remote attacker to execute arbitrary commands. This is due to the lack of data cleaning measures at the management level. **Recommendations** For Tenda CP7 versions V11.10.00.2211041403 and earlier, update to a version later than V11.10.00.2211041403. For Tenda CP3 v.10 versions V20220906024 2025 and earlier, update to a version later than V20220906024 2025. For Tenda IT7-PCS versions V2209020914 and earlier, update to a version later than V2209020914. For Tenda IT7-LCS versions V2209020914 and earlier, update to a version later than V2209020914. For Tenda IT7-PRS versions V2209020908 and earlier, update to a version later than V2209020908. As a temporary workaround, consider restricting access to the affected devices until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WAVLINK WL-WN575A3 version RPT75A3.V4300.201217 **Description** A command injection issue was found in the adm.cgi file, allowing attackers to execute arbitrary commands via the `username` parameter. **Recommendations** For WAVLINK WL-WN575A3 version RPT75A3.V4300.201217, as a temporary workaround, consider restricting access to the adm.cgi file until a patch is available. Avoid using the `username` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-645 version 1.03 **Description** The issue is related to a command injection vulnerability in the ajax explorer.sgi file of the D-Link DIR-645 router's firmware. This vulnerability arises from the failure to neutralize special elements used in the operating system command when processing the `QUERY STRING` parameter. Exploitation of this issue may allow an attacker to execute arbitrary commands. **Recommendations** For D-Link DIR-645 version 1.03, consider restricting access to the ` ajax explorer.sgi` file until a patch is available. As a temporary workaround, avoid using the `QUERY STRING` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.