| Título | Wavlink WL-WN592AX6 M92AX6AI_V250422 OS Command Injection |
|---|
| Descrição | Wavlink WL-WN592AX6 firmware M92AX6AI_V250422 is affected by an unauthenticated remote code execution vulnerability in the wmapd daemon. An attacker on the same Layer 2 network segment can achieve OS command injection (CWE-78) without authentication by sending a crafted L2 packet to inject a command into a heap buffer via strncpy, followed by a TCP packet to port 12838 that triggers execution of the injected command through sprintf and system(). This vulnerability was discovered through static analysis only using Ghidra. See a link on advisory/exploit below for technical details and PoC script.
Note for coordination: Already reported to MITRE (tracking number CAN-2026-2034753) over a week ago. No substantive response received despite a follow-up inquiry. Please coordinate with MITRE as needed to avoid a duplicate CVE assignment. |
|---|
| Fonte | ⚠️ https://drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/view?usp=drive_link |
|---|
| Utilizador | aissac (UID 100146) |
|---|
| Submissão | 03/08/2026 01h44 (há 3 meses) |
|---|
| Moderação | 12/10/2026 10h33 (2 months later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 416861 [Wavlink WL-WN592AX6 250422 wmapd Daemon system Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|