PT-2025-37345 · Wavlink · Wavlink Wl-Wn578W2

N0Ps1Ed · Published 2025-08-28 · Updated 2025-09-15 · CVE-2025-10325

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN578W2 version 221110

Description: A vulnerability exists in the Wavlink WL-WN578W2 router. The issue is located in the /cgi-bin/login.cgi file, specifically within the sub 401340/sub 401BA4 function. Manipulation of the ipaddr argument can lead to command injection, allowing for remote attacks. The exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations: As a temporary workaround, consider restricting access to the /cgi-bin/login.cgi file to minimize the risk of exploitation. Avoid using the ipaddr parameter in the /cgi-bin/login.cgi endpoint until the issue is resolved.

Exploit

Fix

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

BDU:2025-11324

CVE-2025-10325

Affected Products

Wavlink Wl-Wn578W2

References · 12

• 🔥 https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/login.cgi/login/readme.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10325 · Security Note
• https://bdu.fstec.ru/vul/2025-11324 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10325 · Vendor Advisory
• https://vuldb.com/?submit.643436 · Note
• https://vuldb.com/?ctiid.323751 · Note
• https://twitter.com/CVEnew/status/1966596597350900162 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1966618617853702463 · Twitter Post
• https://t.me/CVEtracker/32407 · Telegram Post
• https://vuldb.com/?id.323751 · Note
• https://vuldb.com/?submit.643437 · Note
• https://twitter.com/SecAideInfo/status/1967532745158017340 · Twitter Post