Wavlink WL-WN578W2 Command Injection Vulnerability in Wireless CGI
Vulnerability
A command injection vulnerability has been identified in the Wavlink WL-WN578W2 wireless range extender, specifically in the firmware version M78W2_V221110. The issue arises in the '/cgi-bin/wireless.cgi' file, within the 'AddMac' action. The vulnerability is due to the 'macAddr' parameter being unsanitized and directly appended to system commands, allowing remote attackers to execute arbitrary commands without authentication.
Impact
Exploitation of this vulnerability allows for arbitrary command execution on the device.
Reproduction
To reproduce this vulnerability, send an unauthenticated POST request to '/cgi-bin/wireless.cgi' with the 'page' parameter set to 'AddMac' and inject commands through the 'macAddr' parameter. The injected commands will be executed on the device's operating system.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.