PT-2025-44186 · Wavlink · Wl-Wn530Hg3+1

Published 2025-10-28 · Updated 2025-11-03 · CVE-2025-61128

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730

Description A stack-based buffer overflow exists in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730, and potentially other WAVLINK models. This allows attackers to execute arbitrary code by sending a crafted referrer value in a POST request to the ''login.cgi'' endpoint. The vulnerability is triggered when processing the referrer parameter.

Recommendations Versions prior to M30HG3 V240730 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-61128

Affected Products

Wavlink Quantum D3G

Wl-Wn530Hg3

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-61128 · Security Note
• https://gist.github.com/shinobu-alpha/6dd5ad7f83c16360f6564db0bc121e99 · Note
• https://t.me/poxek/5651 · Telegram Post
• https://t.me/CVEtracker/35974 · Telegram Post
• https://twitter.com/CVEnew/status/1983198082431951198 · Twitter Post
• https://t.me/cveNotify/140829 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1983302602096783468 · Twitter Post