Threats tagged 'ghsa-jxgh-x37p-hq3v'

A critical vulnerability exists in WAVLINK WN536AX6-A V260507_2.0.0 affecting the Web Management Interface. The flaw is an OS command injection in the function sub_416760 of /bin/ioos triggered by manipulation of the argument group_name. This vulnerability can be exploited remotely without authentication. Public exploit code is available, increasing the risk of attack.