Wn551X3 A
Monthly
OS command injection in WAVLINK WN551X3-A firmware M51X3_V251020-WO-182e965 allows unauthenticated remote attackers who can reach the DNS Resolution Handler to manipulate the 'data' argument passed to sub_41a430 in /bin/ioos, with high confidentiality, integrity, and availability impact. The flaw is CWE-78 and carries a CVSS 4.0 score of 9.3; the vuln.today priority decision label is act_now. A public PoC reference exists; it is not verified as working exploit code.
OS command injection in the WAVLINK WN551X3-A WireGuard CLI group handler lets remote attackers inject shell metacharacters through the group_name argument processed by the system function in /bin/ioos, potentially executing arbitrary commands on the router. The CVSS 4.0 score is 9.3 and the vector rates network reachability with no privileges or user interaction, though the provided sources do not explicitly confirm whether the handler is reachable pre-authentication; an admin session is a plausible limiting factor. A public PoC reference exists but is not verified as working exploit code; the issue is labeled act_now, and no CISA KEV active exploitation is indicated.
OS command injection in WAVLINK WN551X3-A firmware M51X3_V251020-WO-182e965 allows unauthenticated remote attackers who can reach the DNS Resolution Handler to manipulate the 'data' argument passed to sub_41a430 in /bin/ioos, with high confidentiality, integrity, and availability impact. The flaw is CWE-78 and carries a CVSS 4.0 score of 9.3; the vuln.today priority decision label is act_now. A public PoC reference exists; it is not verified as working exploit code.
OS command injection in the WAVLINK WN551X3-A WireGuard CLI group handler lets remote attackers inject shell metacharacters through the group_name argument processed by the system function in /bin/ioos, potentially executing arbitrary commands on the router. The CVSS 4.0 score is 9.3 and the vector rates network reachability with no privileges or user interaction, though the provided sources do not explicitly confirm whether the handler is reachable pre-authentication; an admin session is a plausible limiting factor. A public PoC reference exists but is not verified as working exploit code; the issue is labeled act_now, and no CISA KEV active exploitation is indicated.