Threats tagged 'ghsa-22gq-jjvp-2jc9'

WAVLINK WN535M1 and WN535M3 routers with firmware versions prior to M35M1_V250922 have an unauthenticated OS command injection vulnerability. This flaw allows remote attackers to execute arbitrary commands as root by sending specially crafted filenames to the sync_server daemon on TCP port 13136. The vulnerability arises because the daemon uses sprintf() to build a shell command string with attacker-controlled input without sanitization, then executes it via system().