The vulnerability of sub_401B30 in the microprogramming software of Wavlink NU516U1 allows a hacker to execute arbitrary commands.

The vulnerability of sub401B30 in the microprogramming software of Wavlink NU516U1 lies in the lack of measures taken to clean data at the control level when processing the argument remoteManagementEnabled. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via...

CVE-2025-10964

A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attack can be initiated remotely. The exploit has been made...

CVE-2025-10964

Summary : CVE-2025-10964 affects Wavlink NU516U1. The vulnerability resides in the function sub_401B30 of /cgi-bin/firewall.cgi, where improper handling of the remoteManagementEnabled parameter enables remote command injection. The issue can be exploited remotely, and public PoCs/exploits exist. ...