CVE-2025-10358 in WL-WN578W2informazioni

Riassunto

di MITRE • 13/09/2025

A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsabile

VulDB

Divulgazione

13/09/2025

Moderazione

accettato

CPE

pronto

Sfruttamento

Scaricare

EPSS

0.06072

KEV

no

Attività

molto basso

Fonti

Interested in the pricing of exploits?

See the underground prices here!