Comfast CF-N1 V2 Command Injection Vulnerability

A command injection vulnerability exists in the Comfast CF-N1 V2 router, specifically in version 2.6.0.2. The issue arises in the 'sub_44AB9C' function within the '/cgi-bin/mbox-config?method=SET&section=ptest_channel' endpoint. This vulnerability allows remote attackers to execute arbitrary commands by manipulating the 'channel' parameter. Exploitation requires authentication to access the vulnerable endpoint.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to '/cgi-bin/mbox-config?method=SET&section=ptest_channel' with a 'channel' value that includes a command injection payload. The request must include a valid session cookie to authenticate.