Wavlink NU516U1 Command Injection Vulnerability in AddMac Page

A command injection vulnerability has been identified in the Wavlink NU516U1 router, specifically in the M16U1_V240425 version. The issue arises in the AddMac page, within the '/cgi-bin/wireless.cgi' file. The vulnerability is triggered by manipulating the 'macAddr' parameter, which is processed by the 'sub_403010' function. This flaw allows for remote exploitation, as the injected commands are executed on the system.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the device.

Reproduction

To reproduce this vulnerability, send a POST request to '/cgi-bin/wireless.cgi' with the 'page' parameter set to 'AddMac' and the 'macAddr' parameter containing the command to be executed. The injected command will be executed on the system, demonstrating the command injection vulnerability.