Wl Wn530Hg4B
Monthly
OS command injection in the port_forward handler of the WAVLINK WL-WN530HG4B router's web management CGI (/cgi-bin/wapi.cgi) allows an attacker who can reach and authenticate to the device's administrative interface to run arbitrary shell commands on the firmware by placing shell metacharacters in the Name argument of a port-forwarding configuration request. The issue affects firmware build M_V260724 and carries a CVSS 4.0 base score of 8.6, with high confidentiality, integrity and availability impact; the assessed vector (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms the PR:L prerequisite, meaning the practical bar is authenticated access to the management UI rather than a fully unauthenticated internet-wide attack. A public PoC reference has been published in a GitHub write-up, but it is not verified as working exploit code, and no CISA KEV listing or EPSS score is available at time of analysis.
OS command injection in the port_forward handler of the WAVLINK WL-WN530HG4B router's web management CGI (/cgi-bin/wapi.cgi) allows an attacker who can reach and authenticate to the device's administrative interface to run arbitrary shell commands on the firmware by placing shell metacharacters in the Name argument of a port-forwarding configuration request. The issue affects firmware build M_V260724 and carries a CVSS 4.0 base score of 8.6, with high confidentiality, integrity and availability impact; the assessed vector (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms the PR:L prerequisite, meaning the practical bar is authenticated access to the management UI rather than a fully unauthenticated internet-wide attack. A public PoC reference has been published in a GitHub write-up, but it is not verified as working exploit code, and no CISA KEV listing or EPSS score is available at time of analysis.