A critical OS command injection vulnerability in the Planet WGR-500 router allows authenticated attackers to execute arbitrary system commands, potentially leading to a full device compromise.

This is an OS command injection vulnerability (CWE-78) triggered through the swctrl functionality. An attacker with low-level privileges can inject malicious commands via the new_device_name network parameter to achieve remote code execution on the underlying operating system.

Successful exploitation of this vulnerability allows an attacker to gain full control over the affected network device. This poses a significant risk to organizational infrastructure, potentially enabling lateral movement, data interception, or the complete disruption of network services. Given the CVSS score of 8.8, this flaw represents a high-severity risk that requires immediate attention to prevent unauthorized access to internal network segments.

Immediate Action: Contact the vendor immediately to obtain the latest firmware update for the WGR-500, as no specific patch version is currently identified.

Proactive Monitoring: Review device logs for unusual activity or unexpected command execution patterns associated with the swctrl interface.

Compensating Controls: Restrict access to the administrative interface of the device to trusted management IP addresses only and monitor network traffic for anomalous requests containing shell metacharacters.

Public Exploit Available: No (exploit_available: false)

Due to the severity of remote code execution, organizations must prioritize the hardening of these devices. If a firmware update is not immediately available, isolate the affected hardware from the network or restrict access to the web management interface until a verified patch can be applied. Ongoing vigilance and adherence to the principle of least privilege for device management are essential to mitigating this high-risk vulnerability.