DCN DCME-320 Command Injection Vulnerability in Web Management Backend

A command injection vulnerability has been identified in the DCN DCME-320 Web Management Backend, affecting versions through 20260121. The issue arises in the 'apply_config' function within the file '/function/system/basic/bridge_cfg.php'. The vulnerability can be exploited remotely by manipulating the 'ip_list' argument, allowing attackers to execute arbitrary commands on the device.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device, potentially leading to full control over the device.

Reproduction

To reproduce this vulnerability, log in to the device using the default credentials. Once logged in, send a POST request to '/function/system/basic/bridge_cfg.php' with the 'action' parameter set to 'apply_config' and the 'ip_list' parameter crafted to include the desired command. The server will execute the command and return the output.