Description
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.
Published: 2026-08-09
Score: 9.3 Critical
EPSS: 2.5% Low
KEV: No
Impact: Remote Code Execution
Action: Assess Impact
AI Analysis

Impact

MSI Radix AXE6600 firmware version v781521 contains a command injection flaw in the openvpn function that allows a remote attacker to execute arbitrary commands with root privileges on the device. The flaw is triggered through the macfilter mechanism and can be used to run malicious system commands, effectively compromising the entire router.

Affected Systems

MSI Radix AXE6600 Wi‑Fi routers running firmware version v781521 are affected. No other firmware releases or product lines are listed as vulnerable.

Risk and Exploitability

The CVSS score of 9.3 reflects high severity and full system compromise potential, while the EPSS score of 2% indicates a low but nonzero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the openvpn service remotely by sending a crafted macfilter request to inject commands, requiring network connectivity to the router's administrative interface or VPN capability.

Generated by OpenCVE AI on September 25, 2026 at 01:00 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check MSI’s website or router firmware update channel for a patch that fixes the openvpn command injection flaw and apply it when available.
  • If the openvpn service is unnecessary for your deployment, disable or remove the functionality via the router’s configuration interface to eliminate the attack vector.
  • Limit administrative access to the router’s management interface by restricting IP ranges that can reach it, enforce firewall rules to block unauthorized traffic, and monitor logs for suspicious injection attempts.

Generated by OpenCVE AI on September 25, 2026 at 01:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 11 Aug 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Msi
Msi radix Axe6600
Vendors & Products Msi
Msi radix Axe6600

Tue, 11 Aug 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 09 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Description MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.
Title MSI Radix AXE6600 v781521 Command Injection via openvpn function
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Msi Radix Axe6600
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-24T14:18:49.944Z

Reserved: 2026-08-08T23:57:54.802Z

Link: CVE-2026-71993

cve-icon Vulnrichment

Updated: 2026-08-11T01:36:12.755Z

cve-icon NVD

Status : Deferred

Published: 2026-08-09T00:16:48.550

Modified: 2026-08-31T20:30:14.457

Link: CVE-2026-71993

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-25T01:15:21Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')