An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi.cgi to the settings/setPasswordCfg function.
| Software | From | Fixed in |
|---|---|---|
| zioncom / a7000r_firmware | 4.1cu.4154 | 4.1cu.4154.x |