| शीर्षक | Wavlink WN536AX6 V260507 CWE-121 |
|---|
| विवरण | WAVLINK WN536AX6-A routers are vulnerable to a stack-based buffer overflow in the `openvpn_ser` handler of `/protocol.csp`, triggered via the `openvpn_ip` parameter which is copied to a 16-byte stack buffer by an unbounded `strcpy()` (offset 264 to the saved return address, no stack canary). An unauthenticated attacker can crash the Web backend process (DoS) or achieve arbitrary code execution with root privileges, leveraging the default passwordless login (`FirstLogin=1`) to obtain a session token. |
|---|
| स्रोत | ⚠️ https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md |
|---|
| उपयोगकर्ता | yyjy (UID 100438) |
|---|
| सबमिशन | 09/08/2026 05:32 PM (3 महीनों पहले) |
|---|
| संयम | 01/11/2026 08:44 AM (3 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 429625 [WAVLINK WN536AX6-A V260507 OpenVPN /protocol.csp strcpy openvpn_ip बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|