Showing 1 vulnerability on this page for 7-layer Flow Control Router

Signals CISA KEV Ransomware Nuclei
WIFISKY vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

WIFISKY 7-Layer Flow Control Router Remote Command Execution

A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC.

CWE-20CWE-78Jun 26, 2025
CVSS9.4v4.0EPSS3.89%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX