Wavlink vulnerabilities, page 4
226 vulnerabilities
Known vulnerabilities in Wavlink products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 66 products.
CriticalCVE-2022-31311wavlink · aerial_x_1200m_firmwarewavlink aerial_x_1200m_firmwareAn issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request.EPSS2.95%HighCVE-2022-31308wavlink · aerial_x_1200m_firmwarewavlink aerial_x_1200m_firmwareA vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution of the exec cmd function.EPSS1.70%HighCVE-2022-31309wavlink · aerial_x_1200m_firmwarewavlink aerial_x_1200m_firmwareA vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function.EPSS1.70%CriticalCVE-2022-37149wavlink · wl-wn575a3_firmwarewavlink wl-wn575a3_firmwareWAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.EPSS2.79%HighCVE-2022-44356wavlink · wl-wn531g3_firmwarewavlink wl-wn531g3_firmwareWAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files.EPSS2.93%MediumCVE-2022-30489wavlink · wn535g3_firmwarewavlink wn535g3_firmwareWAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi.EPSS4.16%MediumCVE-2022-34573wavlink · wifi-repeater_firmwarewavlink wifi-repeater_firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessing the page mb_wifibasic.shtml.EPSS0.63%HighCVE-2022-34046wavlink · wn533a8_firmwarewavlink wn533a8_firmwareAn access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].EPSS21.12%CriticalCVE-2022-34592wavlink · wl-wn575a3_firmwarewavlink wl-wn575a3_firmwareWavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request.EPSS3.28%HighCVE-2022-34576wavlink · wn535g3_firmwarewavlink wn535g3_firmwareA vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.EPSS3.89%HighCVE-2022-34047wavlink · wl-wn530hg4_firmwarewavlink wl-wn530hg4_firmwareAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd].EPSS22.19%HighCVE-2022-34570wavlink · wl-wn579x3_firmwarewavlink wl-wn579x3_firmwareWAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing the messages.txt page.EPSS1.01%MediumCVE-2022-34049wavlink · wl-wn530hg4_firmwarewavlink wl-wn530hg4_firmwareAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.EPSS2.75%MediumCVE-2022-34048wavlink · wn533a8_firmwarewavlink wn533a8_firmwareWavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter.EPSS6.72%MediumCVE-2022-34575wavlink · wifi-repeater_firmwarewavlink wifi-repeater_firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing fctest.shtml.EPSS0.64%CriticalCVE-2022-34577wavlink · wn535g3_firmwarewavlink wn535g3_firmwareA vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.EPSS2.44%CriticalCVE-2022-34045wavlink · wl-wn530hg4_firmwarewavlink wl-wn530hg4_firmwareWavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.EPSS3.36%MediumCVE-2022-34574wavlink · wifi-repeater_firmwarewavlink wifi-repeater_firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tftpd32.ini.EPSS0.64%MediumCVE-2022-34572wavlink · wifi-repeater_firmwarewavlink wifi-repeater_firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page tftp.txt.EPSS0.64%HighCVE-2022-34571wavlink · wifi-repeater_firmwarewavlink wifi-repeater_firmwareAn access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml.EPSS0.87%