A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.
https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/2/Readme.md