Beveiligingsadvies

CVE-2026-41925

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-04 19:15:43

Laatst bijgewerkt 2026-05-11 23:11:49

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the reboot_time POST parameter. Attackers can send a crafted request with shell metacharacters in the reboot_time parameter when reboot_enabled=1 to achieve remote code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗