Threats tagged 'ghsa-x3j2-x298-hcr4'

A critical vulnerability exists in WAVLINK WN536AX6-A firmware version V260507, involving an OS command injection flaw in the openvpn_cli handler component. The flaw is triggered by manipulation of the argument file_id in the /protocol.csp file. This vulnerability can be exploited remotely without authentication. Public exploit code is available, increasing the risk of exploitation. No patch or remediation information is currently provided by the vendor.