c) Command-injection Attackers can exploit the "ping.php" page to execute arbitrary commands on the device, with administrative privileges. More precisely, the "ip_dominio" POST parameter is not sanitize properly, thus it is possible to leverage traditional command-injection techniques to …