Wavlink NU516U1 Command Injection Vulnerability in SetName Page

A command injection vulnerability has been identified in the Wavlink NU516U1 router, specifically in the M16U1_V240425 firmware version. The issue arises in the SetName page within the '/cgi-bin/wireless.cgi' file, where the 'mac_5g' parameter can be manipulated to execute arbitrary commands. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to '/cgi-bin/wireless.cgi' with the 'page' parameter set to 'SetName' and the 'mac_5g' parameter containing the command to be executed. The injected command will be executed on the router's operating system.