Planet WGR-500 OS Command Injection Vulnerability in swctrl Functionality

A command injection vulnerability has been identified in the swctrl service of the Planet WGR-500 router, specifically in version 1.3411b190912. This vulnerability allows for arbitrary command execution on the device. The issue arises from improper handling of the new_device_name parameter in network requests, enabling attackers to inject and execute malicious commands on the operating system level.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device's operating system.

Reproduction

To reproduce this vulnerability, send a crafted network request to the WGR-500 router's swctrl service over UDP. The request must include the 'new_device_name' parameter with a value that, when processed by the device, results in an OS command injection. Once the command is injected, it will be executed with the same privileges as the router's operating system.