BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.Referenceshttps://sku11army.blogspot.com/2020/03/bwa-multiple-vulnerabilities-in-direx.html