Threats tagged 'ghsa-jfmw-hm93-c7jh'

A stack-based buffer overflow vulnerability exists in the change_password function of the nas.cgi file in Wavlink WL-NU516U1 708c073-mt7628. This vulnerability is triggered by manipulation of the User1Passwd argument and can be exploited remotely without authentication. The vendor has released a fixed version promptly after being notified. The vulnerability has a high severity score of 9.8 CVSS v3.1, indicating critical impact on confidentiality, integrity, and availability.