Browse CVEs

HIGH 7.5 CVE-2023-29708EPSS 14% An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted payload. Wavrouter App No fix yet Fix from $1,9502023-06-22 HIGH 7.5 CVE-2022-48166 An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and … Wl Wn530hg4 Firmware No fix yet Fix from $1,9502023-02-06 HIGH 7.5 CVE-2022-48164 An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download… Wl Wn533a8 Firmware No fix yet Fix from $1,9502023-02-06 HIGH 7.5 CVE-2022-48165 An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to download… Wl Wn530h4 Firmware No fix yet Fix from $1,9502023-02-03 HIGH 7.5 CVE-2022-44356 WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthe… Wl Wn531g3 Firmware No fix yet Fix from $1,9502022-11-29 HIGH 8.8 CVE-2022-40622 The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens.… Wn531g3 Firmware No fix yet Fix from $1,9502022-09-13 HIGH 8.8 CVE-2022-40623 The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issu… Wn531g3 Firmware No fix yet Fix from $1,9502022-09-13 HIGH 7.5 CVE-2022-40621 Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because t… Wn531g3 Firmware No fix yet Fix from $1,9502022-09-13 CRITICAL 9.8 CVE-2022-37149 WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerabili… Wl Wn575a3 Firmware No fix yet Fix from $2,3002022-08-30 CRITICAL 9.8 CVE-2022-35534 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command inj… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35535 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wi… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35536 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injecti… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35537 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injectio… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35538 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_del… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35524 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, … Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35525 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledo… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35526 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.sht… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35533 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection i… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35520 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appea… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35521 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, ping… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35522 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rw… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35523 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command in… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35518 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection … Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35519 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cl… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 HIGH 8.8 CVE-2022-35517 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip,… Wn572hp3 Firmware No fix yet Fix from $1,9502022-08-10 CRITICAL 9.8 CVE-2022-34577 A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request. Wn535g3 Firmware No fix yet Fix from $2,3002022-07-25 HIGH 8.0 CVE-2022-34571 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute ar… Wifi Repeater Firmware No fix yet Fix from $1,9502022-07-25 HIGH 7.5 CVE-2022-34570 WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessin… Wl Wn579x3 Firmware No fix yet Fix from $1,9502022-07-25 HIGH 7.5 CVE-2022-34576 A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POS… Wn535g3 Firmware No fix yet Fix from $1,9502022-07-25 MEDIUM 6.3 CVE-2022-34573 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via access… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25