The vulnerability resides in the ping module of the Neterbit NW‑431F Router firmware versions up to 20241014‑IR03, where an unsanitized IP address field is passed directly to the system's ping command. This lack of input validation allows an attacker to inject arbitrary OS commands, which are then executed under the web server’s privileges. The result is remote code execution capable of compromising confidentiality, integrity, and availability of the device and any systems reachable from it.

The affected product is the Neterbit NW‑431F Router with firmware 20241014‑IR03 and all earlier releases. The vulnerability is tied to the web‑based network diagnostics interface that invokes the ping utility; no other known firmware versions contain the flaw.

The CVSS score of 9.8 indicates a critical severity, but the EPSS score is not available; nevertheless, the lack of input filtering implies the attack could be executed easily over the network. The flaw is not listed in CISA’s KEV catalog, yet the exposure permits remote attackers to run shell commands via the web interface. An attacker can remotely trigger this by sending a crafted ping request to the device’s web server, leading to full control of the router without authentication beyond gaining access to the management interface.