Wn553X1 B
Monthly
OS command injection in the ovpn_file handler of the WAVLINK WN553X1-B router (firmware 260403_2.0.0) allows an authenticated, low-privileged attacker who can reach the management interface to pass a crafted file_id argument into an OS command executed by the /bin/ioos binary (function sub_4162A8). Successful exploitation gives high confidentiality, integrity and availability impact on the device and, per the CVSS 4.0 vector, on subsequent systems, with no user interaction required. A public PoC reference exists (a GitHub write-up); it is not verified as working exploit code, there is no CISA KEV listing, and the disclosure is tracked by VulDB with a this-week handling priority.
OS command injection in the OpenVPN CLI handler of WAVLINK WN553X1-B firmware V260403_2.0.0 allows a remote attacker holding low-level (authenticated) privileges to execute arbitrary OS commands by manipulating the file_id argument processed by sub_416568 in /bin/ioos. Successful exploitation gives full compromise of confidentiality, integrity and availability on the device, which is typically positioned at the network edge. No CISA KEV entry or other confirmation of active exploitation was supplied; a public PoC reference exists, but it is not verified as working exploit code, and the vulnerability is prioritized for remediation this week rather than as an emergency.
OS command injection in WAVLINK WN553X1-B firmware 260403_2.0.0 allows remote attackers with high-privilege administrative access to execute arbitrary OS commands by manipulating the file_id argument passed to the sub_416B50 function in /bin/ioos. The assessed CVSS vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, so the main limiting prerequisite is authenticated administrative access rather than unauthenticated reachability. A public PoC reference exists at a GitHub advisory, but it is not verified as working exploit code, and no CISA KEV entry is indicated.
OS command injection in WAVLINK WN553X1-B firmware V260403_2.0.0 lets a remote attacker with a low-privilege authenticated session execute arbitrary commands through the group_id and group_name arguments processed by sub_416D88 in /bin/ioos. The issue is CWE-78 and carries a CVSS 4.0 score of 8.6; exploitation requires reachability to the device's ioos Service, which is typically LAN-side or an exposed management interface rather than the open internet by default. A public PoC reference exists; it is not verified as working exploit code, and the supplied intelligence does not confirm active exploitation.
OS command injection in the ovpn_file handler of the WAVLINK WN553X1-B router (firmware 260403_2.0.0) allows an authenticated, low-privileged attacker who can reach the management interface to pass a crafted file_id argument into an OS command executed by the /bin/ioos binary (function sub_4162A8). Successful exploitation gives high confidentiality, integrity and availability impact on the device and, per the CVSS 4.0 vector, on subsequent systems, with no user interaction required. A public PoC reference exists (a GitHub write-up); it is not verified as working exploit code, there is no CISA KEV listing, and the disclosure is tracked by VulDB with a this-week handling priority.
OS command injection in the OpenVPN CLI handler of WAVLINK WN553X1-B firmware V260403_2.0.0 allows a remote attacker holding low-level (authenticated) privileges to execute arbitrary OS commands by manipulating the file_id argument processed by sub_416568 in /bin/ioos. Successful exploitation gives full compromise of confidentiality, integrity and availability on the device, which is typically positioned at the network edge. No CISA KEV entry or other confirmation of active exploitation was supplied; a public PoC reference exists, but it is not verified as working exploit code, and the vulnerability is prioritized for remediation this week rather than as an emergency.
OS command injection in WAVLINK WN553X1-B firmware 260403_2.0.0 allows remote attackers with high-privilege administrative access to execute arbitrary OS commands by manipulating the file_id argument passed to the sub_416B50 function in /bin/ioos. The assessed CVSS vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, so the main limiting prerequisite is authenticated administrative access rather than unauthenticated reachability. A public PoC reference exists at a GitHub advisory, but it is not verified as working exploit code, and no CISA KEV entry is indicated.
OS command injection in WAVLINK WN553X1-B firmware V260403_2.0.0 lets a remote attacker with a low-privilege authenticated session execute arbitrary commands through the group_id and group_name arguments processed by sub_416D88 in /bin/ioos. The issue is CWE-78 and carries a CVSS 4.0 score of 8.6; exploitation requires reachability to the device's ioos Service, which is typically LAN-side or an exposed management interface rather than the open internet by default. A public PoC reference exists; it is not verified as working exploit code, and the supplied intelligence does not confirm active exploitation.