WAVLINK WN536AX6-Aに脆弱性、攻撃コード公開済み
Summary
WAVLINK WN536AX6-AのV260507に、認証なしで外部から機器の制御を奪われるおそれのある脆弱性が公表されました。該当機器の有無と管理画面の公開状況を確認し、ベンダーの告知で修正版の有無を調べてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WAVLINK WN536AX6-AのV260507に、認証なしで外部から機器の制御を奪われるおそれのある脆弱性が公表されました。該当機器の有無と管理画面の公開状況を確認し、ベンダーの告知で修正版の有無を調べてください。
Original description The description as published by the source.
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web github.com
- web nvd.nist.gov
- web github.com