CVE-2025-10359

A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor wa...

CVE-2025-10359

CVE-2025-10359 affects Wavlink WL-WN578W2 (firmware 221110). The vulnerability resides in the function sub_404DBC within /cgi-bin/wireless.cgi, where manipulating the macAddr argument leads to an OS command injection . This can be exploited remotely and, per sources, the exploit is publicly avail...

CVE-2025-10359: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor wa...