Root privilege escalation via update argument injection

Command injection in Sunniwell HT3300 firmware before 1.0.0.B022.2 allows local users to gain root privileges through update arguments. The /usr/local/bin/update program inserts its second argument into a shell command after checking only for a .run suffix, then executes it under a passwordless sudo rule. A low-privileged device account permitted by that default rule can execute arbitrary commands as root.