PT-2025-39442 · Wavlink · Wavlink Nu516U1

Panda_0X1 · Published 2025-09-11 · Updated 2025-09-26 · CVE-2025-10964

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 (affected versions not specified)

Description A flaw exists in the Wavlink NU516U1 device. The issue is related to the manipulation of the remoteManagementEnabled argument within the sub 401B30 function of the /cgi-bin/firewall.cgi file, leading to command injection. This allows for remote exploitation. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

BDU:2025-16410

CVE-2025-10964

Affected Products

Wavlink Nu516U1

References · 11

• 🔥 https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md · Exploit
• 🔥 https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md#poc · Exploit
• https://osv.dev/vulnerability/CVE-2025-10964 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10964 · Security Note
• https://bdu.fstec.ru/vul/2025-16410 · Security Note
• https://vuldb.com/?ctiid.325832 · Note
• https://t.me/CVEtracker/33364 · Telegram Post
• https://twitter.com/CVEnew/status/1971301348252520727 · Twitter Post
• https://vuldb.com/?submit.652785 · Note
• https://vuldb.com/?id.325832 · Note
• https://twitter.com/VulmonFeeds/status/1971404658124914864 · Twitter Post