A vulnerability was found in Wavlink WN551K1. It has been rated as critical. This issue affects some unknown processing of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to command injection.

The identification of this vulnerability is CVE-2024-38896. The attack can only be done within the local network. There is no exploit available.