CVE-2023-38861

creationtimestamp| type| source ---|---|--- 2023-08-15 22:30:47+00:00| seen| https://t.me/cibsecurity/68571 2024-02-10 14:19:12+00:00| published-proof-of-concept| https://t.me/MrVGunz/1014...

CVE-2023-38861

An issue in Wavlink WLWNJ575A3 v.R75A3V1410220513 allows a remote attacker to execute arbitrary code via username parameter of the setsysadm function in adm.cgi...

CVE-2023-38861

CVE-2023-38861 affects WAVLINK WL-WNJ575A3 (firmware v.R75A3_V1410_220513). The issue is a command injection in the adm.cgi function set_sys_adm, triggered by the username parameter, enabling a remote attacker to execute arbitrary code. The vulnerability is driven by improper input handling in th...