A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpnip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
A security vulnerability has been detected in WAVLINK WN536AX6-A V2605072.0.0. This issue affects the function sub41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument groupname leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguardcligroup handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument groupid/groupname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function hostblack of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.