CVE-2023-38861

Summary

CVE-2023-38861 is a newly identified vulnerability affecting Wavlink WL_WNJ575A3 v.R75A3_V1410_220513. This issue permits a remote attacker to execute arbitrary code by exploiting a vulnerability in the set_sys_adm function of adm.cgi. The flaw is located in the username parameter, which can be manipulated to trigger the code execution. This vulnerability poses a significant risk and requires affected devices to be updated promptly to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.