LW-N605R devices allow remote code execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.
405a54b7328103d274033ba1718a79ec36e34a387798e6c349e7e6c74465d240