COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn.

Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf() into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by system() with root privileges. A remote authenticated attacker can inject arbitrary commands