Threats tagged 'ghsa-cfhj-2xf7-r697'

A critical command injection vulnerability exists in WAVLINK WN553X1-B V260403_2.0.0 in the ioos Service component. The flaw is in the sub_416D88 function of /bin/ioos, where manipulation of the group_id or group_name argument can lead to remote OS command injection. Exploit code has been published, increasing the risk of exploitation. The vendor was notified early, but no patch information is currently available.