Wavlink WL-WN570HA1 Command Injection Vulnerability in set_sys_adm Function
Vulnerability
A command injection vulnerability has been identified in the Wavlink WL-WN570HA1 router, specifically in the firmware version R70HA1 V1410_221110. The issue arises in the set_sys_adm function within the /cgi-bin/adm.cgi file, where improper handling of the Username argument allows for remote command injection. This vulnerability affects devices that are no longer supported by the manufacturer.
Impact
Exploitation of this vulnerability allows for arbitrary command execution on the affected device.
Added: May 3, 2026, 10:18 AM
Updated: May 3, 2026, 10:18 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
8.7remediation
0.0relevance
7.2threat
6.4urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.