48/100
WAVLINK WN536AX6-A V260507 has remote OS command injection through file_id in the openvpn_cli Handler at /protocol.csp. An exploit is public; authentication requirements, deployment prerequisites and fixed versions need checking in the supplier advisory.