This vulnerability in Wavlink NU516U1 firmware version M16U1_V240425 allows remote attackers to perform OS command injection via manipulation of the EncrypType/wl_Pass parameter in the wzdap function of /cgi-bin/adm.cgi. The attacker-supplied input is passed directly to an operating system command without proper sanitization, enabling arbitrary command execution. The vulnerability has a CVSS 4.0 score of 5.3, indicating medium severity. Although the vendor was contacted early, no official fix or patch has been published as of the data provided. Public exploit code is available, increasing the risk of exploitation.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected device, potentially leading to unauthorized control or disruption of the device's operation. The medium CVSS score reflects that the attack requires no user interaction and has low attack complexity but limited impact scope and privileges. The availability of public exploit code increases the likelihood of exploitation attempts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor vendor communications for updates. Until a patch is released, restricting remote access to the device's management interface and disabling any unnecessary services may reduce exposure.