| Titolo | Wavlink WL-NU516U1 M16U1_V240425 Remote Command Execution |
|---|
| Descrizione | This vulnerability lies in the firmware, which can be exploited for login CGI requests. Attackers can execute arbitrary system commands on the device through specially crafted HTTP requests, thereby completely controlling the device. After in-depth analysis and verification, it has been confirmed that this vulnerability is highly harmful and can lead to the complete takeover of the device. |
|---|
| Fonte | ⚠️ https://github.com/swwer7000/iot |
|---|
| Utente | iot-Utopia (UID 89975) |
|---|
| Sottomissione | 09/09/2025 08:22 (1 Anno fa) |
|---|
| Moderazione | 21/09/2025 10:30 (12 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 325131 [Wavlink WL-NU516U1 240425 /cgi-bin/login.cgi sub_4012A0 ipaddr escalationi di privilegi] |
|---|
| Punti | 18 |
|---|