CyberRota Analysis
AI-GeneratedWAVLINK WN535M1 and WN535M3 routers with firmware versions prior to M35M1_V250922 are susceptible to an unauthenticated OS command injection vulnerability, allowing remote attackers to execute arbitrary commands with root privileges. This critical flaw arises from improper handling of user input in the sync_server daemon, which can be exploited via crafted filenames sent to TCP port 13136. Organizations using these routers should prioritize immediate updates to mitigate potential unauthorized access and control of their network devices.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync_server daemon on TCP port 13136. The daemon interpolates attacker-controlled filename input containing shell metacharacters into a shell command string via sprintf() and passes it to system() without sanitization, enabling root-level command execution on the device.