CVE-2025-10325 | Wavlink WL-WN578W2 221110 /cgi-bin/login.cgi sub_401340 ipaddr command injection

September 12, 2025 Yanac

A vulnerability classified as critical was found in Wavlink WL-WN578W2 221110. This impacts the function sub_401340 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection.

This vulnerability is referenced as CVE-2025-10325. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Restrictive firewalling should be applied.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More