Browse CVEs

MEDIUM 5.7 CVE-2022-34572 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the pag… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 MEDIUM 5.7 CVE-2022-34574 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via acc… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 MEDIUM 5.7 CVE-2022-34575 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via acc… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 CRITICAL 9.8 CVE-2022-34045 Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/… Wl Wn530hg4 Firmware No fix yet Fix from $2,3002022-07-20 HIGH 7.5 CVE-2022-34046EPSS 20% An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sy… Wn533a8 Firmware No fix yet Fix from $1,9502022-07-20 HIGH 7.5 CVE-2022-34047EPSS 21% An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/… Wl Wn530hg4 Firmware No fix yet Fix from $1,9502022-07-20 MEDIUM 6.1 CVE-2022-34048EPSS 6% Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter. Wn533a8 Firmware No fix yet Fix from $1,6002022-07-20 MEDIUM 5.3 CVE-2022-34049 An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data. Wl Wn530hg4 Firmware No fix yet Fix from $1,6002022-07-20 CRITICAL 9.8 CVE-2022-2486EPSS 30% A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.c… Wl Wn535k2 Firmware No fix yet Fix from $2,3002022-07-20 CRITICAL 9.8 CVE-2022-2487EPSS 80% A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bi… Wl Wn535k2 Firmware No fix yet Fix from $2,3002022-07-20 CRITICAL 9.8 CVE-2022-2488EPSS 33% A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/… Wl Wn535k2 Firmware No fix yet Fix from $2,3002022-07-20 CRITICAL 9.8 CVE-2022-34592 Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows … Wl Wn575a3 Firmware No fix yet Fix from $2,3002022-07-07 CRITICAL 9.8 CVE-2022-31311 An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request. Aerial X 1200m Firmware No fix yet Fix from $2,3002022-06-14 HIGH 7.5 CVE-2022-31309 A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via executio… Aerial X 1200m Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31845EPSS 9% A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of … Wn535g3 Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31846EPSS 7% A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of th… Wn535g3 Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31847EPSS 6% A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a… Wn579x3 Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31308 A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution … Aerial X 1200m Firmware No fix yet Fix from $1,9502022-06-14 MEDIUM 6.1 CVE-2022-30489 WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi. Wn535g3 Firmware No fix yet Fix from $1,6002022-05-13 CRITICAL 9.8 CVE-2022-23900 A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized… Wl Wn531p3 Firmware No fix yet Fix from $2,3002022-04-07 CRITICAL 9.8 CVE-2021-44259 A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access thi… Wl Wn531g3 Firmware No fix yet Fix from $2,3002022-03-17 HIGH 7.5 CVE-2021-44260EPSS 7% A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to acce… Wl Wn531g3 Firmware No fix yet Fix from $1,9502022-03-17 CRITICAL 9.8 CVE-2020-12124EPSS 75% A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to e… Wn530h4 Firmware Mitigation only Fix from $2,3002020-10-02 CRITICAL 9.8 CVE-2020-12125 A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execu… Wn530h4 Firmware Mitigation only Fix from $2,3002020-10-02 CRITICAL 9.8 CVE-2020-12126 Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router s… Wn530h4 Firmware Mitigation only Fix from $2,3002020-10-02 HIGH 8.1 CVE-2020-12123 CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, beca… Wn530h4 Firmware Mitigation only Fix from $1,9502020-10-02 HIGH 7.5 CVE-2020-12127EPSS 7% An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to… Wn530h4 Firmware Mitigation only Fix from $1,9502020-10-02 CRITICAL 9.8 CVE-2020-15489 An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scrip… Wl Wn530hg4 Firmware Mitigation only Fix from $2,3002020-07-01 CRITICAL 9.8 CVE-2020-15490 An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to… Wl Wn530hg4 Firmware Mitigation only Fix from $2,3002020-07-01 HIGH 8.8 CVE-2020-10971 An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the sup… Wl Wn575a3 Firmware Mitigation only Fix from $1,9502020-05-07