Blog

A newly identified vulnerability in multiple Ligowave devices allows remote authenticated users to execute arbitrary commands through the web-based management interface. This security issue stems from improper input sanitization in the uam_add_internal and link_test functions, which fail to properly sanitize input parameters, leading to command injection possibilities. ONEKEY advises that affected devices, which are no longer supported by Ligowave, should have their administration interfaces restricted to management networks to mitigate potential exploitation risks.

This security advisory highlights critical vulnerabilities in Delta Electronics’ DVW industrial Ethernet routers, revealed using ONEKEY’s binary zero-day identification feature. The vulnerabilities, affecting all firmware versions, include command injections and buffer overflows that could lead to remote code execution. Despite the end-of-life (EOL) status of these devices, which means no patches will be issued, it is advised to limit access to the administrative interface to prevent exploitation.

This security advisory discloses critical vulnerabilities in Cisco’s Small Business Wireless APs and describes remote command execution vulnerabilities in all firmware versions that could be uncovered through the use of ONEKEY’s recently released binary zero-day identification feature. Although there are no patches due to the end-of-life status of the devices, it is recommended to restrict access to the administration interface.