CVE-2026-120345

Summary

The WAVLINK WN551X3-A device's DNS Resolution Handler contains an OS command injection vulnerability in the sub_41a430 function of /bin/ioos, where unsanitized user-supplied data passed as a DNS argument allows remote attackers to execute arbitrary OS commands.

Exploitability

Exploitation is trivial for remote attackers as it requires no authentication, user interaction, or special conditions; the public exploit confirms low effort to reproduce.

Blast radius

Successful exploitation grants full system compromise (confidentiality, integrity, and availability) with network-level access, enabling complete device takeover and potential pivot into internal networks.

Detection

Look for unexpected subprocess execution of /bin/ioos with suspicious command-line arguments (e.g., shell metacharacters like ';', '|', '$(') in system logs or process monitoring; alternatively, monitor for outbound DNS queries containing encoded command payloads or anomalous network traffic to non-DNS ports from the device.

Prioritized remediation

Upgrade to firmware version M51X3_V251020-WO-182e965-patched or later if available; until then, disable DNS resolution functionality or isolate the device from untrusted networks, as no fixed version is explicitly named in the description beyond the vulnerable build.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.