Edimax BR-6478AC V3 Command Injection Vulnerability Allowing Remote Code Execution

A remote code execution vulnerability has been identified in the Edimax BR-6478AC V3 router, specifically in version 1.0.15. The issue arises in the function 'sub_416990' within the file '/boafrm/formTracerouteDiagnosticRun', where improper handling of the 'host' argument allows for OS command injection. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Reproduction

To reproduce this vulnerability, upload the firmware version 1.0.15 onto the Edimax BR-6478AC V3 router. After the firmware is uploaded, navigate to the 'formTracerouteDiagnosticRun' function and manipulate the 'host' argument to inject OS commands. This can be done using a tool like Burp Suite to intercept and modify the request.