Wavlink WL-WN570HA1 Command Injection Vulnerability in set_sys_cmd Function
Vulnerability
A command injection vulnerability has been identified in the Wavlink WL-WN570HA1 router, specifically in the firmware version R70HA1 V1410_221110. The issue arises in the set_sys_cmd function within the /cgi-bin/adm.cgi file, where improper handling of the command argument allows for remote command injection. This vulnerability affects products that are no longer supported by the manufacturer.
Impact
Exploitation of this vulnerability allows for remote command injection on the affected device.
Added: May 3, 2026, 11:19 AM
Updated: May 3, 2026, 11:19 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
8.7remediation
0.0relevance
7.3threat
6.4urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.