CVE-2023-38861

CVE-2023-38861 affects WAVLINK WL-WNJ575A3 (firmware v.R75A3_V1410_220513). The issue is a command injection in the adm.cgi function set_sys_adm, triggered by the username parameter, enabling a remote attacker to execute arbitrary code. The vulnerability is driven by improper input handling in th...