Hackerpipi

A flaw in the openvpn cli Handler component allows remote attackers to perform os command injection. This occurs through the manipulation of the `file id` argument within an unknown function of the '/protocol.csp' endpoint. OS command injection is a technique where an attacker executes arbitrary operating system commands on the server.

A remote OS command injection exists in the WireGuard component. The issue occurs within the `wireguard cli group` handler of the `/protocol.csp` file. An attacker can exploit this by manipulating the `group id` or `group name` variables, which are passed unsanitized to a shell command via the `system()` function. Successful exploitation allows the execution of operating system commands with router-service privileges. Access to the management endpoint and a session token are required for exploitation.

A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

A command injection issue exists in the router web UI. A remote attacker can execute arbitrary commands and take control of the network by sending crafted input to the `con check read finish()` function within the `/protocol.csp` file. The flaw is triggered via the `group name/IP-FROM` argument.

A remote OS command injection exists within the Initial Setup Wizard component. The issue occurs when the `set wzdgwMesh()` function in the '/cgi-bin/adm.cgi' endpoint fails to properly handle the `wlan ssid` argument, allowing an attacker to execute arbitrary commands on the device by providing a specially crafted wireless network name.

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del vlan group of the component ioos Web Backend. The manipulation of the argument vlan name results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

The ioos Web Backend component contains a flaw in the `del staticrule` function within the `static route setting.sh` file. A remote attacker can execute arbitrary operating system commands by manipulating the `rule name` argument. This occurs during the handling of static route deletions.

A remote attacker can perform OS command injection, which allows the execution of arbitrary operating system commands and potentially grants full control over the device. This issue occurs within the `port forward()` function of the '/cgi-bin/wapi.cgi' endpoint when the `Name` parameter is manipulated.

A flaw in the web port forwarding feature allows a remote attacker to execute arbitrary operating system commands. This occurs through the manipulation of the `Name` parameter within the `port forward` function of the '/cgi-bin/wapi.cgi' endpoint.