CyberRota Analysis
AI-GeneratedA critical stack-based buffer overflow vulnerability exists in the change_password function of the nas.cgi file in Wavlink WL-NU516U1 devices, allowing for remote exploitation through manipulation of the User1Passwd argument. This flaw poses a significant risk as it can lead to unauthorized access and potential system compromise. Organizations using affected Wavlink products should prioritize immediate upgrades to the patched version to mitigate this threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.