CVE-2025-10964: Wavlink NU516U1 firewall.cgi sub_401B30 command injection

Published Sep 25, 2025

Updated

A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Wavlink NU516U1

Wavlink WL-NU516U1

Event History

Sep 25, 2025

CVE Published

via MITRE·07:32 PM

Data Sourced

via MITRE·07:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10964?

CVE-2025-10964 is classified as a critical vulnerability due to its potential for remote command injection.

How do I fix CVE-2025-10964?

To mitigate CVE-2025-10964, it is recommended to disable remote management on the Wavlink NU516U1 device until a firmware update is available.

What systems are affected by CVE-2025-10964?

CVE-2025-10964 affects the Wavlink NU516U1 router.

Can CVE-2025-10964 be exploited remotely?

Yes, CVE-2025-10964 can be exploited remotely, allowing attackers to execute commands on the vulnerable device.

Is there a patch available for CVE-2025-10964?

As of now, there is no specific patch available for CVE-2025-10964, so users should apply immediate mitigative measures.