WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Link | Tags |
---|---|
https://www.wavlink.com/en_us/firmware/details/932108ffc5.html | product patch |
https://jvn.jp/en/jp/JVN78634340/ | third party advisory patch |