Threats tagged 'ghsa-fmc2-w58f-qqpv'

A critical vulnerability exists in WAVLINK WN579X3-D firmware version V250402 in the port_forward function of /cgi-bin/wapi.cgi. An attacker can remotely perform OS command injection by manipulating the Name argument. Public exploit code is available, increasing the risk of exploitation. No patch or remediation information is currently provided by the vendor.