CVE-2024-39360 | Wavlink AC3000 M33A8.V5030.210505 nas.cgi remove_dir command injection (TALOS-2024-2054)

A vulnerability classified as critical has been found in Wavlink AC3000 M33A8.V5030.210505. Affected is the function remove_dir of the file nas.cgi. The manipulation leads to command injection.

This vulnerability is traded as CVE-2024-39360. It is possible to launch the attack remotely. There is no exploit available.