An issue exists on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string.
veracomp asmax_ar-804gu_firmware 66.34.1