important · Firmware / Wi-Fi
One unauthenticated LAN request executes commands as root on a Netcore NAP930.
Affects
Netcore NAP930, a Wi-Fi 6 business access point running OpenWrt-derived embedded firmware.
The network_tools CGI evaluates the sid value before checking the session, so closing its quoted value appends a root shell command.
Detail and 2 sources
The published request was validated against the original firmware filesystem under emulation.