Edimax RE11S Command Injection Vulnerability

A command injection vulnerability has been identified in the Edimax RE11S router, specifically in version 1.11. The issue arises in the component '/goform/formAccept', where user-supplied data can be manipulated to execute arbitrary system commands.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/formAccept' endpoint with a 'submit-url' parameter. This parameter can be crafted to include malicious commands, which will be executed on the system.