12 matches found
CVE-2026-18589
A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function changepassword of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be use...
CVE-2026-18589 Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow
A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function changepassword of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be use...
PT-2026-67147
A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change password of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be...
CVE-2026-18589: Stack-based Buffer Overflow
A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function changepassword of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be use...
The vulnerability of the sub_401218 function in the /cgi-bin/nas.cgi script of the Wavlink WL-NU516U1 wireless USB printer software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sub401218 function in the /cgi-bin/nas.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the output of operations that go beyond the buffer in memory when processing the User1Passwd parameter. Exploiting this vulnerability could allow an...
CVE-2026-2567
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now publi...
CVE-2026-2567
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now publi...
CVE-2026-2567 Wavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflow
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now publi...
CVE-2026-2567: Stack-based Buffer Overflow
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now publi...
WAVLINK WL-NU516U1 缓冲区错误漏洞
WAVLINK WL-NU516U1 is a wireless print server developed by WAVLINK Corporation. The Wavlink WL-NU516U1 20251208 version contains a buffer error vulnerability. This vulnerability stems from incorrect handling of the parameter User1Passwd in the file/cgi-bin/nas.cgi, which may lead to a stack buffe...
PT-2026-8382
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub 401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now publ...
CVE-2022-35518: Improper Neutralization of Special Elements used in a Command
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nasdisk.shtml...