Threats tagged 'ghsa-wwwc-4jrc-qfr7'

A command injection vulnerability exists in the ping_ddns function of the /cgi-bin/adm.cgi file in Wavlink WL-WN570HA1 R70HA1 V1410_221110 firmware. This vulnerability allows remote attackers to manipulate the DDNS argument to execute arbitrary commands. The affected firmware version has been removed from the vendor's website and is no longer supported.