CVE-2021-43283

CVE-2021-43283 is a command injection vulnerability affecting Victure WR1200 devices through firmware version 1.0.3. An authenticated attacker can exploit this flaw in the ping and traceroute features of the web interface to execute arbitrary shell commands with root privileges. This vulnerability carries a CVSS score of 8.8 (High), indicating a significant risk of complete compromise (confidentiality, integrity, and availability) if exploited. While there is no evidence of active exploitation (KEV list), public exploit intelligence is limited, and there is some community discussion, suggesting potential for future exploitation.