X300 (<= 6.01.3) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/x300--6.01.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 11 Oct 2026 14:01:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOS Command Injection in TOZED X300 via IPPingDiagnosticshttps://feed.craftedsignal.io/briefs/2026-10-tozed-x300-rce/Sun, 11 Oct 2026 14:01:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-tozed-x300-rce/An unauthenticated remote OS command injection vulnerability in the TOZED X300 IPPingDiagnostics Handler allows attackers to execute arbitrary code via the Host argument.The TOZED X300 device, in versions up to and including 6.01.3, contains a critical OS command injection vulnerability within the IPPingDiagnostics Handler component. Specifically, the process_ping function fails to properly sanitize the 'Host' argument before processing it, allowing a remote, unauthenticated attacker to inject and execute arbitrary operating system commands. Given that this vulnerability exists in a network-facing diagnostic function, it poses a significant risk for complete device takeover. TOZED has not provided a response or a patch as of the time of disclosure, making this an unmitigated risk for organizations deploying these devices in their infrastructure.

Impact

Successful exploitation of CVE-2026-108576 results in remote code execution with the privileges of the underlying service process. This can lead to total device compromise, potential lateral movement into the local network, and the capability to intercept or manipulate traffic traversing the device. The impact is significant for any sector relying on TOZED X300 hardware for gateway or routing services.

Recommendation

Prioritized actions for network and security teams:

  • Implement strict ingress filtering to prevent unauthorized external access to the diagnostic interfaces of TOZED X300 devices.
  • Monitor for unusual traffic patterns targeting diagnostic or ping-related API endpoints on the X300.
  • If the device management interface is exposed, immediately move it to a management-only VLAN and restrict access to authorized IP ranges via firewall rules.
  • Since no patch is available, assess if these devices can be replaced or isolated from critical production segments until a security update is released by the vendor.
]]>criticaladvisory