CNNVD-202509-3924 Information

Sep 25, 2025 cve

CNNVD ID

CNNVD-202509-3924

CVE-2025-10964

CNNVD Published: 2025-09-25

Description (Chinese)

Wavlink NU516U1是中国睿因（Wavlink）公司的一款无线打印服务器。 Wavlink NU516U1存在命令注入漏洞，该漏洞源于文件/cgi-bin/firewall.cgi中函数sub_401B30对参数remoteManagementEnabled的错误操作，可能导致远程命令注入攻击。

Description (English)

Wavlink NU516U1 is a wireless printing server for Wavlink. Wavlink NU516U1 has a command-injecting loophole, which stems from the error of the function sub 401B30 against parameter remoteManagementEnabled in file/cgi-bin/firewall.cgi, which may result in a remote command-injection attack.

Hazard Level

High

Vulnerability Type

命令注入

Affected Vendor

Web Wiz

Published

2025-09-25

Last Modified

2026-02-24

References

https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md#poc https://vuldb.com/?ctiid.325832 https://vuldb.com/?id.325832 https://vuldb.com/?submit.652785

Share on: