A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. The affected element is the function sub416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument fileid causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
A vulnerability was found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument fileid results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This issue affects the function sub416B50 of the file /bin/ioos. The manipulation of the argument fileid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.