PT-2026-8322 · Unknown · Wayos Fbm-220G

Jfkk · Publicado 2026-02-16 · Atualizado 2026-02-18 · CVE-2026-2548

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WAYOS FBM-220G version 24.10.19

Description A flaw exists in WAYOS FBM-220G version 24.10.19 related to command injection. Manipulation of the arguments upnp waniface, upnp ssdp interval, and upnp max age within the sub 40F820 function of the rc file can allow for remote execution of commands. The vendor was contacted regarding this issue but did not provide a response.

Recommendations As a temporary workaround, consider restricting or disabling the use of the upnp waniface, upnp ssdp interval, and upnp max age arguments. Disable the sub 40F820 function if possible. Avoid using the rc file if it is not essential for the operation of the system.

Exploit

Correção

Special Elements Injection

Command Injection

Enumeração de Fraquezas

CWE-74

CWE-77

Identificadores relacionados

CVE-2026-2548

Produtos afetados

Wayos Fbm-220G

Referências · 8

• 🔥 https://github.com/glkfc/IoT-Vulnerability/blob/main/wayos/wayos.md · Exploit
• https://vuldb.com/?submit.749802 · Nota
• https://t.me/cveNotify/152100 · Publicação no Telegram
• https://vuldb.com/?ctiid.346157 · Nota
• https://twitter.com/SecAideInfo/status/2024070975428637033 · Publicação no Twitter
• https://t.me/CVEtracker/44801 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2548 · Nota de Segurança
• https://vuldb.com/?id.346157 · Nota