Shell Metacharacter Injection in Wavlink Devices
CVE-2020-15489

9.8CRITICAL

Key Information:

Vendor

Wavlink

Status
Wl-wn530hg4 Firmware
Vendor
CVE Published:
1 July 2020

What is CVE-2020-15489?

A vulnerability has been identified in Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices that exposes multiple CGI scripts to shell metacharacter injection. This flaw allows attackers to execute arbitrary commands with root privileges remotely, potentially compromising device security and integrity. It is crucial for users to apply updates and safeguards to protect against this exploit.

References

https://gitlab.com/drakylar1/drakylar-cve-list/-/blob/mas...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-15489 : Shell Metacharacter Injection in Wavlink Devices