| عنوان | Wavlink WN536AX6 V260507 CWE-121 |
|---|
| الوصف | WAVLINK WN536AX6-A routers are vulnerable to a stack-based buffer overflow in the `openvpn_ser` handler of `/protocol.csp`, triggered via the `openvpn_ip` parameter which is copied to a 16-byte stack buffer by an unbounded `strcpy()` (offset 264 to the saved return address, no stack canary). An unauthenticated attacker can crash the Web backend process (DoS) or achieve arbitrary code execution with root privileges, leveraging the default passwordless login (`FirstLogin=1`) to obtain a session token. |
|---|
| المصدر | ⚠️ https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md |
|---|
| المستخدم | yyjy (UID 100438) |
|---|
| ارسال | 09/08/2026 05:32 PM (3 أشهر منذ) |
|---|
| الاعتدال | 01/11/2026 08:44 AM (3 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 429625 [WAVLINK WN536AX6-A V260507 OpenVPN /protocol.csp strcpy openvpn_ip تلف الذاكرة] |
|---|
| النقاط | 20 |
|---|