EDIMAX CV7428NS Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the EDIMAX CV7428NS camera, specifically in firmware version 1.20. The issue arises in the 'mp' function, where the 'command' parameter is processed through unsanitized input passed to the 'system()' function. This vulnerability allows attackers to execute arbitrary commands with root privileges by injecting shell metacharacters.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device with root privileges.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/mp' endpoint. The 'command' parameter should be included in the request body, with the desired command payload concatenated using shell metacharacters such as '&&'. Once the request is sent, the response will contain the output of the executed commands, demonstrating successful exploitation.