Description

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root privileges on the underlying system.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "9.8",
  "pubDate": "2026-08-09T00:16:48.550Z",
  "pubdate": "2026-08-09T00:16:48.550Z",
  "executiveSummary": "An arbitrary command injection vulnerability has been identified in the MSI Radix AXE6600 router running firmware version v781521. The vulnerability resides within the openvpn and macfilter functions, allowing remote attackers to execute arbitrary system commands with elevated privileges.\nThe primary impact of this security flaw is complete system compromise, enabling malicious actors to obtain root privileges on the underlying operating system. This grants the attacker full administrative control over the affected network device, potentially facilitating further network penetration, traffic interception, or device manipulation.\nThe vulnerability affects the MSI Radix AXE6600 hardware running firmware version v781521. Successful exploitation poses severe risk implications, as it compromises the perimeter security of the network where the router is deployed. Attackers require network access to the target device and the ability to interact with the vulnerable openvpn and macfilter administrative interfaces to trigger the injection.\nNo specific authentication requirements are explicitly detailed beyond interacting with the vulnerable functionality, but exploitation fundamentally relies on improper input sanitization within the device's management routines. Remediation requires applying vendor-supplied firmware updates or restricting network exposure of administrative interfaces.",
  "technicalDetails": "The vulnerability is classified as an OS command injection flaw stemming from insufficient input validation and sanitization within the firmware logic handling the openvpn and macfilter functions on the MSI Radix AXE6600 router.\nSpecifically, the affected firmware version v781521 fails to adequately sanitize user-supplied parameters passed to system-level execution routines when processing configurations related to the macfilter functionality exposed via the openvpn subsystem.\nThe attack flow proceeds as follows: An attacker leverages network access to target the router's management or configuration interface. By crafting a malicious payload containing shell metacharacters and appending it to inputs accepted by the vulnerable macfilter function, the attacker manipulates the underlying command string executed by the operating system shell.\nBecause the application passes the unsanitized input directly to system execution functions with high privileges, the injected commands are interpreted and executed by the underlying operating system interpreter.\nThe privilege requirement for the resulting execution context culminates in root privileges, allowing the payload to execute arbitrary commands with the highest level of system access. Post-exploitation impact includes persistent compromise, arbitrary binary execution, modification of system configurations, and complete loss of confidentiality, integrity, and availability of the affected network device."
}