ADSLR B-QE2W401 Command Injection Vulnerability in send_order.cgi
Vulnerability
A command injection vulnerability has been identified in the ADSL B-QE2W401 250814-r037c model. The issue arises in the send_order.cgi file, specifically within the parameterdel_swifimac function. This vulnerability allows remote attackers to execute arbitrary commands by manipulating the del_swifimac argument. The exploitation of this vulnerability does not require authentication.
Impact
Exploitation of this vulnerability allows for arbitrary command execution on the affected device.
Added: Dec 1, 2025, 1:20 AM
Updated: Dec 1, 2025, 1:20 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
8.7remediation
0.0relevance
1.2threat
6.4urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.