Wavlink Wn535K3 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Wavlink Wn535K3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-50756wavlinkwn535k3_firmware
EPSS score
1.79%
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.9.8CVE-2022-2488wavlinkwl-wn535k2_firmware+3
EPSS score
33.41%
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used.9.8CVE-2022-2486wavlinkwl-wn535k2_firmware+3
EPSS score
30.19%
A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used.9.8CVE-2022-2487wavlinkwl-wn535k2_firmware+3
EPSS score
79.30%
A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has been disclosed to the public and may be used.