| 제목 | Wavlink WN530HG4B M30HG4B_V260724 Heap-based Buffer Overflow |
|---|
| 설명 | This vulnerability is a pre-auth RCE vulnerability found in the latest firmware (M30HG4B_V260724) of WAVLINK's WN530HG4B product. It is triggered by manipulating heap chunk metadata through a heap overflow. An attacker can supply input to api.cgi, and because the code copies user-supplied untrusted input without checking its length, the vulnerability occurs. The RCE vulnerability was successfully exploited using single binary emulation with QEMU. For further details, please refer to the advisory/exploit link below. Here is the link to download the lastest firmware of WN530HG4B: https://docs.wavlink.xyz/Firmware/?category=Router&model=WL-WN530HG4B |
|---|
| 원천 | ⚠️ https://drive.google.com/file/d/12OOh8g9YDCbD-Q4cc52J6TH9KuOoD44A/view?usp=drive_link |
|---|
| 사용자 | aissac (UID 100146) |
|---|
| 제출 | 2026. 08. 16. PM 02:33 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 10. 15. AM 11:31 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 420571 [Wavlink WN530HG4B M30HG4B_V260724 api.cgi 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|