PT-2025-39441 · Wavlink · Wavlink Nu516U1 M16U1 V240425

Panda_0X1 · Published 2025-09-11 · Updated 2025-09-26 · CVE-2025-10963

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 M16U1 V240425

Description A security flaw exists in the Wavlink NU516U1 M16U1 V240425. The issue is due to command injection in the /cgi-bin/firewall.cgi file, specifically within the sub 4016F0 function. Manipulation of the del flag argument can lead to remote code execution. The exploit for this issue has been publicly released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

BDU:2025-16416

CVE-2025-10963

Affected Products

Wavlink Nu516U1 M16U1 V240425

References · 11

• 🔥 https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md#poc · Exploit
• 🔥 https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md · Exploit
• https://bdu.fstec.ru/vul/2025-16416 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10963 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10963 · Vendor Advisory
• https://vuldb.com/?ctiid.325831 · Note
• https://t.me/CVEtracker/33361 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1971422575692484875 · Twitter Post
• https://vuldb.com/?submit.652784 · Note
• https://twitter.com/CVEnew/status/1971291801198919967 · Twitter Post
• https://vuldb.com/?id.325831 · Note