CVE-2026-120198：A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affec
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
漏洞详情
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
风险评估
- CVSS 评分：9.3（CRITICAL）
- 评分版本：CVSS 4.0
- 攻击向量：
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
弱点类型
CWE-74、CWE-77
参考链接
- https://github.com/pipiyyb/cve/blob/main/WN530BE1.md
- https://vuldb.com/cve/CVE-2026-120198
- https://vuldb.com/submit/918551
- https://vuldb.com/vuln/429561
- https://vuldb.com/vuln/429561/cti
数据来源：NVD（美国国家漏洞数据库），入库时按 CVSS 评分筛选。
原文链接： CVE-2026-120198：A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affec