Comfast CF-N1 vulnerabilities

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.

A vulnerability was determined in Comfast CF-N1 2.6.0 affecting the wifilith_delete_pic_file function of the file /usr/bin/webmgnt. Manipulation of the portal_delete_picname argument causes command injection. The attack is possible to be carried out remotely and the exploit has been publicly disclosed.

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

A vulnerability has been found in Comfast CF-N1 2.6.0 affecting the ping_config function of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation is possible and the exploit has been disclosed to the public.

A flaw has been found in Comfast CF-N1 2.6.0 affecting the ntp_timezone function of the file /usr/bin/webmgnt. Manipulation of the timestr argument leads to command injection. The attack may be launched remotely and the exploit has been published.

A vulnerability was detected in Comfast CF-N1 2.6.0 affecting the multi_pppoe function of the file /usr/bin/webmgnt. Manipulation of the phy_interface argument results in command injection. The attack may be initiated remotely and the exploit is now public.