JD Cloud BE6500 Command Injection Vulnerability in DDNS Name Parameter

A command injection vulnerability has been identified in the JD Cloud BE6500 router, specifically in the web interface of version 4.4.1.r4308. The issue arises in the 'sub_4780' function of the '/jdcapi' file, where the 'ddns_name' parameter is manipulated without proper input validation. This vulnerability allows remote attackers to execute arbitrary commands with root privileges on the device.

Impact

Exploitation of this vulnerability provides unauthorized users with root access, allowing them to execute any system command on the device.

Reproduction

To reproduce this vulnerability, send a POST request to the '/jdcapi' endpoint with the 'ddns_name' parameter crafted to include a command payload. This can be done using a tool like Burp Suite or a custom script that automates the process. Once the request is sent, the device will execute the injected command, such as establishing a reverse shell connection.