| 제목 | Wavlink WL-WN592AX6 M92AX6AI_V250422 OS Command Injection |
|---|
| 설명 | Wavlink WL-WN592AX6 firmware M92AX6AI_V250422 is affected by an unauthenticated remote code execution vulnerability in the wmapd daemon. An attacker on the same Layer 2 network segment can achieve OS command injection (CWE-78) without authentication by sending a crafted L2 packet to inject a command into a heap buffer via strncpy, followed by a TCP packet to port 12838 that triggers execution of the injected command through sprintf and system(). This vulnerability was discovered through static analysis only using Ghidra. See a link on advisory/exploit below for technical details and PoC script.
Note for coordination: Already reported to MITRE (tracking number CAN-2026-2034753) over a week ago. No substantive response received despite a follow-up inquiry. Please coordinate with MITRE as needed to avoid a duplicate CVE assignment. |
|---|
| 원천 | ⚠️ https://drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/view?usp=drive_link |
|---|
| 사용자 | aissac (UID 100146) |
|---|
| 제출 | 2026. 08. 03. AM 01:44 (3 개월 ago) |
|---|
| 모더레이션 | 2026. 10. 12. AM 10:33 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416861 [Wavlink WL-WN592AX6 250422 wmapd Daemon system 권한 상승] |
|---|
| 포인트들 | 20 |
|---|