Threats tagged 'ghsa-g52x-rm7c-qh3g'

A command injection vulnerability exists in the set_sys_cmd function of the /cgi-bin/adm.cgi file in Wavlink WL-WN570HA1 R70HA1 V1410_221110 firmware. This flaw allows remote attackers to execute arbitrary commands by manipulating the command argument. The affected firmware version has been removed from the vendor's website and is no longer supported. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit details have been disclosed. No patch or fix is available due to the product being unsupported.