Command Injection Vulnerability in SetSysEmailSettings (CVE-2025-60701) 1. Vulnerability Overview 2. Exploitation Path 3. Vulnerable Binaries prog.cgi: Handles user input and stores it in NVRAM variables. rc: Executes the command using NVRAM variables, leading to command injection. 4. 0-Day Command Injection Exploitation Path 1. stores user input for email settings into NVRAM. 2. retrieves and uses these values for the command, causing injection. 5. Proof of Concept (PoC) for Reproducing the Vulnerability