CyberRota Analysis
AI-GeneratedA critical stack-based buffer overflow vulnerability exists in the Wavlink WL-NU516U1, specifically in the fgets function of the nas.cgi file, which can be exploited remotely through manipulation of the CONTENT_LENGTH argument. This flaw poses a significant risk as it could allow attackers to execute arbitrary code on the affected device. Organizations using this product should prioritize immediate upgrades to the patched version to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.