Wavlink Wl Wn535K3 vulnerabilities

5 vulnerabilities

Known vulnerabilities in Wavlink Wl Wn535K3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2025-50757wavlinkwl-wn535k3_firmware
EPSS score
1.85%
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.6.5CVE-2025-50755wavlinkwl-wn535k3_firmware
EPSS score
1.08%
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.9.8CVE-2022-2488wavlinkwl-wn535k2_firmware+3
EPSS score
33.41%
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used.9.8CVE-2022-2486wavlinkwl-wn535k2_firmware+3
EPSS score
30.19%
A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used.9.8CVE-2022-2487wavlinkwl-wn535k2_firmware+3
EPSS score
79.30%
A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has been disclosed to the public and may be used.