WAVLINK WN535M1 path traversal vulnerability

The WAVLINK WN535M1 and WN535M3 models are affected by a path traversal vulnerability. This vulnerability arises because the syncserver daemon on TCP port 13136 operates without authentication; it fails to normalize the 100-byte filename field within the protocol header. Remote attackers can...