Network perimeter threat intelligence advisories issued today warn of active wild exploitation targeting wireless routing hardware. Unauthenticated remote adversaries transmit malformed DNS resolution requests over the public internet to execute arbitrary operating system commands under root administrative privileges.
The vulnerability, tracked as CVE-2026-120345 with a maximum CVSS score of 10.0, affects WAVLINK WN551X3-A routers running firmware build M51X3_V251020-WO-182e965. The defect resides within the DNS resolution handler function sub_41a430 inside the binary /bin/ioos. Unauthenticated remote threat actors submit crafted data arguments within DNS resolution requests to inject operating system commands directly into system execution subroutines. Threat telemetry confirms public exploit code is actively weaponized by automated scanning botnets targeting exposed SMB edge routers.
Subverting perimeter wireless routing devices undermines network boundary controls across small business and branch office networks. Because edge routers manage local IP routing, DNS resolution, and gateway access control lists, an unauthenticated remote command execution compromise permits adversaries to capture transit traffic, rewrite internal DNS records, and pivot into corporate subnets.
– Isolate WAVLINK WN551X3-A routing hardware from untrusted external interfaces immediately and verify vendor firmware updates.
– Restrict remote WAN management and DNS query resolution interfaces to isolated, trusted IP ranges.
– Inspect network gateway traffic for anomalous outbound connections or unverified DNS resolution payloads.
– Replace unpatchable or end-of-life edge routing hardware with enterprise-grade access control gateways.
Edge network hardware defense demands rigid parameter sanitization and immediate firmware updates to ensure gateway devices remain protected against unauthenticated remote command injection exploits. #CodeDefence #WAVLINK #RouterSecurity #CommandInjection #RCE #ZeroDay #PerimeterSecurity #NetworkSecurity #AppSec #PatchManagement
/
