CVE-2024-39787 | Wavlink AC3000 M33A8.V5030.210505 nas.cgi add_dir disk_part path traversal (TALOS-2024-2057)

CVE-2024-39787 | Wavlink AC3000 M33A8.V5030.210505 nas.cgi add_dir disk_part path traversal (TALOS-2024-2057)

A vulnerability, which was classified as critical, was found in Wavlink AC3000 M33A8.V5030.210505. This affects the function add_dir of the file nas.cgi. The manipulation of the argument disk_part leads to path traversal. This vulnerability is uniquely identified as CVE-2024-39787. It is possible to initiate the attack remotely. There is no exploit available.