Critical · published January 14, 2025
🚨 A crafted HTTP request can execute arbitrary code on your Wavlink AC3000 device — no authentication needed! 🔥 Think of your login.cgi like a restaurant where anyone can walk in and yell meal orders without checking their ID — if they say the magic words, they can whip up an entire feast. 🍽️ An attacker could launch malicious commands, taking over your device completely. This could lead to unauthorized access to sensitive information or even hijack the device for further attacks. The potential fallout is absolutely devastating!
Think of your login.cgi like a restaurant where anyone can walk in and yell meal orders without checking their ID — if they say the magic words, they can whip up an entire feast. 🍽️ Multiple OS command injection vulnerabilities exist in the login.cgi's set_sys_init() function, particularly through the `restart_week_value` POST parameter. This allows unauthenticated attackers to execute commands on the server.
An attacker could launch malicious commands, taking over your device completely. This could lead to unauthorized access to sensitive information or even hijack the device for further attacks. The potential fallout is absolutely devastating! Immediately patch the Wavlink AC3000 firmware to the latest version to close these vulnerabilities. Review your network configurations to restrict access and consider setting up a firewall to block unauthorized HTTP requests. Don't wait — secure your devices today! You've got this! By taking these steps, you'll have your Wavlink AC3000 locked down in no time! 🛡️