BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the management interface of multiple BEC Technologies routers. This issue arises from improper validation of user-supplied input, which allows authenticated attackers to inject commands that are executed at the system level. Notably, the authentication requirement can be bypassed. The vulnerability affects routers listening on TCP port 22 by default.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.