CVE-2022-40740 – Realtek GPON router - Command Injection

https://notcve.org/view.php?id=CVE-2022-40740

03 Jan 2023 — Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service. • https://www.twcert.org.tw/tw/cp-132-6831-19121-1.html • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •