Description
A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Wavlink WN572
20260609affected
Wavlink WN570H
20260609affected
Wavlink WN573
20260609affected
Wavlink WN529
20260609affected
Wavlink WN530
20260609affected
Wavlink WN531
20260609affected
Wavlink WN535
20260609affected
Wavlink etc. WN529
20260609affected
Wavlink WN530
20260609affected
Wavlink WN531
20260609affected
Wavlink WN535
20260609affected
Wavlink WN536
20260609affected
Wavlink WN551
20260609affected
Wavlink WN557
20260609affected
Wavlink NU516
20260609affected