Threats tagged 'ghsa-c696-6wrh-863m'

A command injection vulnerability exists in the WifiBasic function of the /cgi-bin/wireless.cgi file in Wavlink NU516U1 240425. This flaw allows remote attackers with low privileges to manipulate the AuthMethod/EncrypType argument and execute arbitrary OS commands. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a medium severity rating with a CVSS score of 6.3.