Qihoo 360 D600-2 (<= 6.3.2)

A remote OS command injection vulnerability exists in the Timezone Push Handler of specific Qihoo 360 router models.