Description
A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wavlink | WL-NU516U1 | V240425 | — |
References
- VDB-349221 | Wavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflow vdb-entry technical-description
- VDB-349221 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #755341 | Wavlink NU516U1 V240425 Stack-based Buffer Overflow third-party-advisory
- https://github.com/Wlz1112/WAVLINK-NU516-V240425/blob/main/ipaddr_Stack%20Buffer%20Overflow.md exploit