WAVLINK WL-WN530HG4Bにコマンド実行の脆弱性、PoC公開
Summary
WAVLINK WL-WN530HG4Bのポート転送機能に、機器上で任意のコマンドを実行される脆弱性があり、検証情報も公開されています。該当機器を使う組織は、版の確認と管理画面の外部公開の停止を進めてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WAVLINK WL-WN530HG4Bのポート転送機能に、機器上で任意のコマンドを実行される脆弱性があり、検証情報も公開されています。該当機器を使う組織は、版の確認と管理画面の外部公開の停止を進めてください。
Original description The description as published by the source.
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web github.com
- web nvd.nist.gov
- web github.com