Submit #880051: https://www.redportglobal.com/ RedPort Optimizer wXa-213 wXa-213、wXa-203、wXa-223 Command Injection

Product Overview
Optimizer series satellite WiFi routers manufactured by RedPort Global contain a remote command execution vulnerability. Official Website: https://www.redportglobal.com/
1. Vulnerability Description
The RedPort Optimizer wXa-213 is a satellite network optimization router developed by Global Marine Networks (now RedPort Global). It is mainly deployed in maritime, remote and other satellite communication-reliant scenarios. As a front-end device for satellite broadband services including Inmarsat BGAN, FleetBroadband, Iridium Certus, etc., it reduces expensive satellite communication fees and prevents "bill shock" through data compression, traffic management and firewall capabilities. A vulnerability exists on its index.php page. Attackers can craft malicious JSON payloads to trigger arbitrary command execution during server-side parsing, gaining full control of the device directly.
2. Vulnerability Impacts
Attackers can construct malicious JSON input to trigger arbitrary code execution upon server parsing. Successful exploitation enables remote command execution, file read/write operations, data theft and tampering. This leads to severe security incidents including server full compromise, core data leakage and business system outage with high critical risks.
3. Affected Versions
wXa213, wXa203, wXa223 and related models
4. Vulnerability URL
/xgatev1/system/datetime.php
5. Vulnerability Reproduction
Root Cause Code Analysis
When configuring the system clock, the program reads raw POST body data, parses it via JSON, then directly concatenates the parsed value into the date system command and invokes the exec() function to modify system time. After successful time modification, the system formats the timestamp using %Y-%m-%d %H:%M:%S.
https://uvxbywu62qm.feishu.cn/wiki/EA4TwFTx0ih9IhkJX5QcnCmlnSd?from=from_copylink

• Source: ⚠️ https://uvxbywu62qm.feishu.cn/wiki/EA4TwFTx0ih9IhkJX5QcnCmlnSd?from=from_copylink
• User: huliangjia (UID 99519)
• Submission: 07/04/2026 11:42 (3 months ago)
• Moderation: 08/31/2026 17:59 (2 months later)
• Status: Accepted
• VulDB entry: 397374 [RedPort Optimizer wXa-223 up to 20260704 System Clock datetime.php exec command injection]
• Points: 20