Planet WGR-500 OS Command Injection Vulnerability in swctrl Functionality

A command injection vulnerability has been identified in the swctrl service of the Planet WGR-500 router, specifically in version 1.3411b190912. This vulnerability allows for arbitrary command execution on the device. The issue arises from improper handling of the new_password parameter in network requests, enabling attackers to inject and execute commands on the operating system level.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a crafted network request to the WGR-500 router's swctrl service over UDP. The request must include the 'new_password' parameter with a value that, when processed by the device, triggers the command injection. Once the vulnerability is exploited, the injected command will be executed on the router's operating system.