Wavlink Ac3000 vulnerabilities, page 3
62 vulnerabilities
Known vulnerabilities in Wavlink Ac3000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2024-39604wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.EPSS1.99%CriticalCVE-2024-39357wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS2.47%CriticalCVE-2024-39770wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `en_enable` POST parameter.EPSS1.29%CriticalCVE-2024-39795wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.EPSS1.56%CriticalCVE-2024-39761wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_week_value` POST parameter.EPSS8.40%CriticalCVE-2024-39793wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_name` POST parameter.EPSS1.56%CriticalCVE-2024-39359wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS2.47%CriticalCVE-2024-39774wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS1.35%CriticalCVE-2024-39370wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS2.24%CriticalCVE-2024-39756wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS1.93%CriticalCVE-2024-39789wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists within the `ftp_port` POST parameter.EPSS1.10%CriticalCVE-2024-39803wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A buffer overflow vulnerability exists in the `sel_mode` POST parameter.EPSS1.29%CriticalCVE-2024-39781wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `restart_hour` POST parameter.EPSS4.60%CriticalCVE-2024-39367wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS8.48%CriticalCVE-2024-39294wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS1.58%CriticalCVE-2024-39602wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS2.38%CriticalCVE-2024-37184wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS1.35%CriticalCVE-2024-37186wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS23.43%CriticalCVE-2024-37357wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS9.96%CriticalCVE-2024-38666wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS19.39%