Wavlink · Wavlink Wl-Wn530Hg4 · CVE-2025-44868
**Name of the Vulnerable Software and Affected Versions**
Wavlink WL-WN530H4 version 20220801
**Description**
The issue is related to a command injection vulnerability in the `ping test` function of the `adm.cgi` via the `pingIp` parameter. This allows attackers to execute arbitrary commands via a crafted request to the API endpoint `/adm.cgi`.
**Recommendations**
For Wavlink WL-WN530H4 version 20220801, as a temporary workaround, consider disabling the `ping test` function until a patch is available. Restrict access to the `adm.cgi` module to minimize the risk of exploitation. Avoid using the `pingIp` parameter in the affected API endpoint until the issue is resolved.