Command Execution in China Mobile Intelligent Home Gateway HG6543C4 shortcut_telnet.cg

Successful exploitation allows remote arbitrary code execution on the affected gateway. On an Internet-exposed or otherwise reachable device, this can enable full compromise of the appliance, including malware deployment, botnet enrollment, configuration tampering, persistence, and use of the device as a pivot or attack platform.

Do not expose the affected gateway management interface to untrusted networks. Limit access with firewall or ACL rules to trusted administrative hosts only, disable remote administration if not required, segment affected devices from critical internal networks, and monitor for exploitation attempts involving requests to shortcut_telnet.cg. Because the vulnerability has been referenced in IoT botnet exploitation activity, additional monitoring for post-exploitation indicators and unauthorized process execution is warranted.

Upgrade to a vendor-provided fixed version if one is available for China Mobile Intelligent Home Gateway HG6543C4. If no patch information is currently available, restrict access to the vulnerable management interface or component, disable or remove exposure of shortcut_telnet.cg where possible, and follow vendor guidance for firmware updates and hardening.