Authenticated command execution via stored configuration injection

OS command injection in affected REX and mbNET firmware allows remote authenticated users to execute commands through malicious configuration values. The configuration generator stores attacker-controlled values and passes them to a system execution operation without validating or neutralizing command syntax. High-privilege configuration access is required, and the payload executes when a later configuration is generated, enabling full device compromise.