Gryphon Tower Command Injection Vulnerability (CNVD-2021-100348)

Gryphon Tower is a wireless router from Gryphon, Inc. A command injection vulnerability exists in Gryphon Tower, which stems from the failure to properly filter user input for special characters, commands, etc. in the controller_server service on the router, which could be exploited by a remote, unauthenticated attacker to send specially crafted malicious packets to execute commands on the device as root.