Threats tagged 'ghsa-h4pj-rg5x-h3wx'

A remote OS command injection vulnerability exists in the wifi_region function of the /cgi-bin/adm.cgi file in Wavlink NU516U1 M16U1_V240425. Manipulating the skiplist1 or skiplist2 arguments can lead to this issue. Public exploit code is available, but no confirmed exploitation in the wild has been reported. The vendor was notified early about the vulnerability.