CVE-2024-39789 is a critical vulnerability in the Wavlink AC3000 M33A8.V5030.210505 router's nas.cgi set_ftp_cfg() functionality. It involves multiple external configuration control flaws, including a configuration injection via the ftp_port POST parameter. An authenticated attacker can send specially crafted HTTP requests to bypass permissions and manipulate configuration settings.