| 제목 | Wavlink WN536AX6 V260507 CWE-121 |
|---|
| 설명 | WAVLINK WN536AX6-A routers are vulnerable to a stack-based buffer overflow in the `openvpn_ser` handler of `/protocol.csp`, triggered via the `openvpn_ip` parameter which is copied to a 16-byte stack buffer by an unbounded `strcpy()` (offset 264 to the saved return address, no stack canary). An unauthenticated attacker can crash the Web backend process (DoS) or achieve arbitrary code execution with root privileges, leveraging the default passwordless login (`FirstLogin=1`) to obtain a session token. |
|---|
| 원천 | ⚠️ https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md |
|---|
| 사용자 | yyjy (UID 100438) |
|---|
| 제출 | 2026. 08. 09. PM 05:32 (3 개월 ago) |
|---|
| 모더레이션 | 2026. 11. 01. AM 08:44 (3 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 429625 [WAVLINK WN536AX6-A V260507 OpenVPN /protocol.csp strcpy openvpn_ip 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|