Wn579X3 D
Monthly
OS command injection (CWE-78) in the WAVLINK WN579X3-D wireless router (reported at firmware V250402) lets an attacker who can reach the web management interface execute arbitrary shell commands on the device by supplying a crafted 'Name' argument to the port_forward function of /cgi-bin/wapi.cgi. The vendor's CVSS 4.0 vector scores this 8.6 (AV:N/AC:L/AT:N/PR:L/UI:N with high confidentiality, integrity and availability impact), and the parallel assessment confirms remote reachability with low attack complexity but requires a low-privilege authenticated session on the management interface, so this is not a fully unauthenticated attack; exposure rises sharply where the admin interface is reachable from the WAN or default/weak credentials remain in place. A public PoC reference exists (a GitHub write-up linked from the VulDB entry) but has not been verified as working exploit code, and no confirmed active exploitation (CISA KEV) has been reported. Successful exploitation gives full control of the device's configuration and the traffic it forwards.
OS command injection (CWE-78) in the WAVLINK WN579X3-D wireless router (reported at firmware V250402) lets an attacker who can reach the web management interface execute arbitrary shell commands on the device by supplying a crafted 'Name' argument to the port_forward function of /cgi-bin/wapi.cgi. The vendor's CVSS 4.0 vector scores this 8.6 (AV:N/AC:L/AT:N/PR:L/UI:N with high confidentiality, integrity and availability impact), and the parallel assessment confirms remote reachability with low attack complexity but requires a low-privilege authenticated session on the management interface, so this is not a fully unauthenticated attack; exposure rises sharply where the admin interface is reachable from the WAN or default/weak credentials remain in place. A public PoC reference exists (a GitHub write-up linked from the VulDB entry) but has not been verified as working exploit code, and no confirmed active exploitation (CISA KEV) has been reported. Successful exploitation gives full control of the device's configuration and the traffic it forwards.