Qihoo 360 D606-6 (<= 6.3.2)

A remote OS command injection vulnerability exists in the Timezone Push Handler of specific Qihoo 360 router models.