UTT HiPER 520 Command Injection Vulnerability in Web Management Interface

A command injection vulnerability has been identified in the UTT HiPER 520 router, specifically in the web management interface version 1.7.7-160105. The issue arises in the '/goform/formPdbUpConfig' endpoint, within the 'sub_44D264' function. The vulnerability allows authenticated remote attackers to inject operating system commands through the 'policyNames' parameter, which are then executed with root privileges. This exploitation could lead to a full system compromise.

Impact

Exploitation of this vulnerability allows for unauthorized execution of operating system commands with root privileges, potentially leading to a complete compromise of the device.

Reproduction

To reproduce this vulnerability, send a crafted HTTP POST request to the '/goform/formPdbUpConfig' endpoint. Include injected commands in the 'policyNames' parameter. The injection can be verified by executing commands that return output, such as 'whoami', which will be executed on the system with root privileges.