CNNVD-202509-1837 Information

Sep 13, 2025 cve

CNNVD ID

CNNVD-202509-1837

CVE-2025-10358

CNNVD Published: 2025-09-13

Description (Chinese)

Wavlink WL-WN578W2是中国睿因（Wavlink）公司的一款无线中继器。 Wavlink WL-WN578W2 221110版本存在操作系统命令注入漏洞，该漏洞源于对文件/cgi-bin/wireless.cgi中函数sub_404850的参数delete_list的错误操作，可能导致远程命令注入攻击。

Description (English)

Wavlink WL-WN578W2 is a wireless repeater of Wavlink. The Wavlink WL-WN578W2 2211110 version contains a bug in the operating system command, which results from an error in the parameter sub 404850 in the file/cgi-bin/wireless.cgi function delete list, which may result in a remote command injection attack.

Hazard Level

Medium

Vulnerability Type

操作系统命令注入

Affected Vendor

睿因

Published

2025-09-13

Last Modified

2026-02-24

References

https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac#proof-of-concept-poc https://vuldb.com/?ctiid.323772 https://vuldb.com/?id.323772 https://vuldb.com/?submit.643438 https://access.redhat.com/security/cve/cve-2025-10358

Share on: