Beeline Smart Box 2.0.38 routers allow \Advanced settings > Other > Diagnostics\ OS command injection via the Ping ping_ipaddr parameter the Nslookup nslookup_ipaddr parameter or the Traceroute traceroute_ipaddr parameter.