A CGI endpoint is a web handler that accepts an HTTP request and runs server-side logic, often returning a status page, diagnostic result, or configuration response. On embedded devices such as routers, these endpoints commonly power admin features like ping tests, WAN checks, or firmware utilities.
CGI endpoints matter because they often sit close to privileged functions. If the handler passes request parameters into shell commands or other sensitive operations without strict validation, a simple web request can turn into command injection and possibly remote code execution. Attackers probe CGI paths such as diagnostics or apply pages to find this weakness, while defenders reduce risk by removing exposed management interfaces, patching firmware, restricting access to trusted networks, and enforcing allowlists on all input.