CVE-2025-10323: Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injection
A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub409184 of the file /wizardrep.shtml. The manipulation of the argument selEncrypTyp results in command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10323?
CVE-2025-10323 is classified as a high-severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2025-10323?
To mitigate CVE-2025-10323, it is recommended to apply the latest firmware updates provided by Wavlink for the WL-WN578W2.
What type of vulnerability is CVE-2025-10323?
CVE-2025-10323 is a command injection vulnerability affecting the Wavlink WL-WN578W2.
Can CVE-2025-10323 be exploited remotely?
Yes, CVE-2025-10323 can be exploited remotely, allowing attackers to execute commands on the affected device.
What function within the firmware is affected by CVE-2025-10323?
CVE-2025-10323 impacts the function sub_409184 in the file /wizard_rep.shtml.