Threats tagged 'ghsa-5m3x-rp28-cf8g'

A critical remote command injection vulnerability exists in WAVLINK WN551X3-A firmware M51X3_V251020-WO-182e965, specifically in the DNS Resolution Handler component. The flaw allows an attacker to manipulate input to the sub_41a430 function in /bin/ioos, leading to OS command injection without requiring authentication. Exploit code has been publicly disclosed, increasing the risk of exploitation.