The vulnerability of the sub_404DBC() function (/cgi-bin/wireless.cgi) in the microprogrammed software for WAVLINK WL-WN578W2 allows a hacker to execute arbitrary commands.

The vulnerability of the sub404DBC function /cgi-bin/wireless.cgi in the software for WAVLINK WL-WN578W2 amplifiers is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the macAddr parameter. Exploiting this vulnerability...

Wavlink WL-WN578W2 sub_404DBC Function OS Command Injection Vulnerability

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. The Wavlink WL-WN578W2 221110 version has an operating system command injection vulnerability, which originates from the parameter macAddr in the sub404DBC function of the file /cgi-bin/wireless.cgi that fails to correctly filter...