Critical OS Command Injection Vulnerability in Wavlink WL-WN530BE1-A

## Overview Wavlink WL-WN530BE1-A firmware versions up to M30BE1_V251117 contain a critical OS command injection vulnerability. The issue resides in the sub_23B54 function of the ioos binary. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands. ## Technical Details The vulnerability occurs when the unsanitized file_id parameter is passed to the popen() function during requests to /protocol.csp?opt=ovpn_file with type=del. An attacker can exploit this by sending a forged IP-FROM: 127.0.0.1 header, which bypasses authentication mechanisms. This allows the attacker to run commands with root privileges. ## Impact The CVSS score for this vulnerability is 9.3, indicating a critical severity level. Successful exploitation can lead to full system compromise. Attackers can gain root access, potentially allowing them to manipulate system configurations, exfiltrate sensitive data, or deploy additional malware. ## Mitigation Defenders should immediately update the firmware of affected Wavlink devices to the latest version that addresses this vulnerability. Regularly check for firmware updates and apply them promptly. Additionally, restrict access to the device management interfaces and monitor logs for any unauthorized access attempts.