Description
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, display_n.
Published: 2026-08-26
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A flaw in the web management interface of Comfast CF‑WR630AX firmware allows a remote attacker to supply crafted values for the parameters timestr and display_n. These values are used in /usr/bin/webmgnt and /cgi-bin/mbox-config in a manner that leads to arbitrary code execution on the device, giving the attacker full control over the system and the ability to install, modify, or delete data.

Affected Systems

The vulnerability exists in Comfast CF‑WR630AX devices running firmware version 2.7.0.2. No other versions are noted in the advisory.

Risk and Exploitability

The CVSS score of 6.8 indicates a moderate severity vulnerability that can be exploited remotely. The EPSS score of < 1% suggests a low probability of exploitation in the wild, but the vulnerability remains listed as not in KEV. The attack can be performed over the network by sending HTTP requests with the vulnerable parameters to the exposed web interfaces, making it a network‑based exploit that can be triggered without local access.

Generated by OpenCVE AI on August 31, 2026 at 19:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Comfast’s latest firmware update that addresses the remote code execution flaw.
  • Configure perimeter firewalls or device ACLs to block external access to the /usr/bin/webmgnt and /cgi-bin/mbox-config endpoints.
  • Enforce strong authentication and authorization on the device’s web management interface, limiting access to trusted personnel only.

Generated by OpenCVE AI on August 31, 2026 at 19:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 01 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Comfast
Comfast cf-wr630ax
Vendors & Products Comfast
Comfast cf-wr630ax

Mon, 31 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Web Management Parameters in Comfast CF‑WR630AX Firmware

Mon, 31 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 26 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Web Management Parameters in Comfast CF‑WR630AX Firmware
Weaknesses CWE-78

Wed, 26 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, display_n.
References

Subscriptions

Comfast Cf-wr630ax
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-31T17:42:51.568Z

Reserved: 2026-08-17T00:00:00.000Z

Link: CVE-2026-75363

cve-icon Vulnrichment

Updated: 2026-08-31T17:42:28.890Z

cve-icon NVD

Status : Deferred

Published: 2026-08-26T21:16:40.857

Modified: 2026-08-31T20:59:32.817

Link: CVE-2026-75363

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-01T14:24:38Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')