A critical command injection vulnerability in UTT 进取 750W routers permits remote, unauthenticated attackers to execute arbitrary system commands, posing a severe risk to network integrity.

The vulnerability is a command injection flaw (CWE-77) triggered by improper sanitization of the policyNames argument within the /goform/formPdbUpConfig function. It allows any unauthenticated remote attacker to inject and execute system commands.

The ability for an unauthenticated attacker to inject commands into a network device poses a high risk of total system compromise, including the potential for lateral movement into the internal network. Given the CVSS score of 7.3, this represents a significant security risk, as the device acts as a gateway for organizational traffic. Compromise of this router could lead to unauthorized data interception, service disruption, or the establishment of persistent backdoors.

Immediate Action: As there is no vendor patch available, administrators should restrict access to the management interface to trusted internal segments only or disable the web interface entirely if not required for operations.

Proactive Monitoring: Monitor device logs for suspicious activity targeting the /goform/formPdbUpConfig endpoint and audit system configuration changes for unauthorized modifications.

Compensating Controls: Deploy a Web Application Firewall or network-based Intrusion Detection System to block requests containing malicious command injection patterns targeting the vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up provided in the vulnerability references.

Due to the lack of a vendor-provided patch and the presence of a public proof-of-concept, this vulnerability must be treated with high urgency. Organizations utilizing the UTT 进取 750W should immediately isolate the device from external exposure and implement strict network segmentation until a formal vendor resolution is released.