Threats tagged 'ghsa-5268-gj55-x6jx'

A critical command injection vulnerability exists in WAVLINK WN553X1-B V260403_2.0.0 in the OpenVPN CLI Handler component. The flaw is in the function sub_416568 of the /bin/ioos file, where improper handling of the argument file_id allows remote attackers to execute arbitrary OS commands. The vulnerability has a high CVSS score of 9.9 and has been publicly disclosed with exploit code available. No patch or remediation information is currently provided by the vendor.