| Título | Wavlink WN536AX6 V260507 CWE-121 |
|---|
| Descrição | WAVLINK WN536AX6-A routers are vulnerable to a stack-based buffer overflow in the `openvpn_ser` handler of `/protocol.csp`, triggered via the `openvpn_ip` parameter which is copied to a 16-byte stack buffer by an unbounded `strcpy()` (offset 264 to the saved return address, no stack canary). An unauthenticated attacker can crash the Web backend process (DoS) or achieve arbitrary code execution with root privileges, leveraging the default passwordless login (`FirstLogin=1`) to obtain a session token. |
|---|
| Fonte | ⚠️ https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md |
|---|
| Utilizador | yyjy (UID 100438) |
|---|
| Submissão | 09/08/2026 17h32 (há 3 meses) |
|---|
| Moderação | 01/11/2026 08h44 (3 months later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 429625 [WAVLINK WN536AX6-A V260507 OpenVPN /protocol.csp strcpy openvpn_ip Excesso de tampão] |
|---|
| Pontos | 20 |
|---|