CyberRota Analysis
AI-GeneratedMultiple Wavlink router models are vulnerable due to a stack-based buffer overflow in the strcpy function of the upload.cgi component in lighttpd, triggered by manipulation of the HTTP_COOKIE argument. This vulnerability allows for remote exploitation, potentially leading to unauthorized access or control over the affected devices. Organizations using these routers should prioritize immediate patching or mitigation efforts to safeguard their networks against potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.