Threats tagged 'ghsa-2hvf-6vwf-3fjq'

A command injection vulnerability exists in the wzdrepeater function of the /cgi-bin/adm.cgi file in Wavlink NU516U1 M16U1_V240425. This flaw allows remote attackers to execute arbitrary OS commands by manipulating specific arguments. Public exploit code is available, increasing the risk of exploitation. The vendor has been notified, but no patch information is provided.