Wavlink vulnerabilities, page 5

226 vulnerabilities

Known vulnerabilities in Wavlink products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 66 products.

9.8CriticalCVE-2022-35525wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml.EPSS2.38%9.8CriticalCVE-2022-35538wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to command injection in page /wifi_mesh.shtml.EPSS2.21%9.8CriticalCVE-2022-35533wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml.EPSS2.28%9.8CriticalCVE-2022-35520wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml.EPSS2.28%9.8CriticalCVE-2022-35536wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml.EPSS2.21%9.8CriticalCVE-2022-35524wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.EPSS2.28%8.8HighCVE-2022-35517wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml.EPSS2.23%9.8CriticalCVE-2022-35522wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command injection in page /wan.shtml.EPSS2.28%9.8CriticalCVE-2022-35526wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml.EPSS2.28%9.8CriticalCVE-2022-35521wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml.EPSS2.28%9.8CriticalCVE-2022-35534wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifi_multi_ssid.shtml.EPSS2.28%9.8CriticalCVE-2022-35535wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.EPSS2.28%9.8CriticalCVE-2022-35523wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml.EPSS2.28%9.8CriticalCVE-2022-35537wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.EPSS2.21%9.8CriticalCVE-2022-35519wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml.EPSS2.28%9.8CriticalCVE-2022-35518wavlink · wn530h4_firmware +4 morewavlink wn530h4_firmwareWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.EPSS1.49%9.8CriticalCVE-2022-23900wavlink · wl-wn531p3_firmwarewavlink wl-wn531p3_firmwareA command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi.EPSS3.52%9.1CriticalCVE-2024-21797wavlink · wavlink ac3000 +1 morewavlink wavlink ac3000A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.EPSS21.32%9.8CriticalCVE-2024-54747wavlink · wn531p3_firmwarewavlink wn531p3_firmwareWAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.EPSS0.56%9.8CriticalCVE-2024-54745wavlink · wn701ae_firmwarewavlink wn701ae_firmwareWAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.EPSS0.56%