A critical command injection vulnerability in D-Link DI-7001 MINI_5G hardware permits remote code execution, posing a significant risk of full system compromise.

The flaw exists within the msp_info function, where improper sanitization of the flag parameter allows an unauthenticated attacker on the local network to inject and execute arbitrary system commands.

Successful exploitation of this vulnerability allows an attacker to gain unauthorized control over the affected router, potentially leading to unauthorized data access, network traffic interception, or the device being utilized as a pivot point for further attacks on the internal network. Given the CVSS score of 8.1, this vulnerability represents a high risk to organizational security and infrastructure integrity.

Immediate Action: Check the official D-Link support portal for available firmware updates and apply them immediately. If no patch is currently available, restrict access to the device management interface to trusted administrative IP addresses only.

Proactive Monitoring: Review system logs for suspicious activity targeting the msp_info endpoint and monitor for unusual outbound traffic originating from the affected hardware.

Compensating Controls: Implement network segmentation to isolate the affected device from critical internal assets and deploy a network-based intrusion detection system to monitor for command injection patterns.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the technical write-up referenced in the CVE record.

This vulnerability presents a clear path to unauthorized command execution on the target hardware. Organizations utilizing the D-Link DI-7001 MINI_5G should prioritize identifying these units within their environment and applying firmware updates as soon as the vendor makes them available. Until a patch is confirmed, enforcing strict network access controls to the device is essential to mitigate the risk of exploitation.