This vulnerability affects the Wavlink NU516U1 router firmware M16U1_V240425. The change_wifi_password function in the /cgi-bin/adm.cgi script improperly handles input parameters wl_channel, wl_Pass, and EncrypType, leading to OS command injection. An attacker can remotely exploit this flaw to execute arbitrary operating system commands on the device. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, and no privileges or user interaction required. The vendor was notified early, but no patch or official remediation level is currently available.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected device, potentially compromising the router's integrity and control. This could lead to unauthorized access, device manipulation, or further network compromise. The vulnerability is exploitable remotely without authentication or user interaction, increasing its risk. However, no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting remote access to the router's management interface and monitor for unusual activity. Avoid exposing the device's administrative interface to untrusted networks. Follow vendor channels for updates on patches or mitigations.