UTT Aggressive 520W Remote Command Execution Vulnerability

A remote command execution vulnerability has been identified in the UTT Aggressive 520W router, specifically in versions through v3v1.7.7-180627. The vulnerability resides in the '/goform/formReleaseConnect' component, where attackers can execute arbitrary commands by sending a crafted string. The exploitation involves manipulating the 'Isp_Name' parameter, which, if not empty, triggers the execution of commands via a system function.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected router.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/formReleaseConnect' with a crafted 'Isp_Name' parameter. The value should include a command, such as 'ls', which will be executed on the router. Ensure that the request includes the necessary headers for authorization and content type.