| Titel | Wavlink WL-WN592AX6 M92AX6AI_V250422 OS Command Injection |
|---|
| Beschreibung | Wavlink WL-WN592AX6 firmware M92AX6AI_V250422 is affected by an unauthenticated remote code execution vulnerability in the wmapd daemon. An attacker on the same Layer 2 network segment can achieve OS command injection (CWE-78) without authentication by sending a crafted L2 packet to inject a command into a heap buffer via strncpy, followed by a TCP packet to port 12838 that triggers execution of the injected command through sprintf and system(). This vulnerability was discovered through static analysis only using Ghidra. See a link on advisory/exploit below for technical details and PoC script.
Note for coordination: Already reported to MITRE (tracking number CAN-2026-2034753) over a week ago. No substantive response received despite a follow-up inquiry. Please coordinate with MITRE as needed to avoid a duplicate CVE assignment. |
|---|
| Quelle | ⚠️ https://drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/view?usp=drive_link |
|---|
| Benutzer | aissac (UID 100146) |
|---|
| Einreichung | 03.08.2026 01:44 (vor 3 Monaten) |
|---|
| Moderieren | 12.10.2026 10:33 (2 months later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 416861 [Wavlink WL-WN592AX6 250422 wmapd Daemon system erweiterte Rechte] |
|---|
| Punkte | 20 |
|---|