CVE-2026-3715

Katalog CVE

CVSS 8.8 · High EPSS 1,0%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada wavlink wl-wn579x3-c firmware. Skor CVSS 3.1 8.8 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Rincian

Terbit di NVD

8 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 63,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Litengzheng/vul_db/blob/main/WL-WN579X3-C/vul_17/README.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.349660 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.765325 advisory pihak ketiga · vdb entry
• https://dl.wavlink.com/firmware/RD/WN579X3C_WAVLINK_V20260226_WO_cb3003b2.bin broken link
• https://vuldb.com/?ctiid.349660 permissions required · vdb entry