WAVLINK WL-WN579A3-Aに脆弱性、攻撃手法が公開
Summary
WAVLINK WL-WN579A3-Aの管理用CGIに、認証なしで機器にコマンドを実行させられる脆弱性が見つかり、攻撃手法も公開されています。該当機器を使う組織は、ベンダーの告知で修正版を確認し、管理画面に届く範囲を絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WAVLINK WL-WN579A3-Aの管理用CGIに、認証なしで機器にコマンドを実行させられる脆弱性が見つかり、攻撃手法も公開されています。該当機器を使う組織は、ベンダーの告知で修正版を確認し、管理画面に届く範囲を絞ってください。
Original description The description as published by the source.
A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com