Browse CVEs

CRITICAL 9.8 CVE-2022-35524 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, … Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35525 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledo… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35526 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.sht… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35533 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection i… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35520 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appea… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35521 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, ping… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35522 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rw… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35523 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command in… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35518 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection … Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 CRITICAL 9.8 CVE-2022-35519 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cl… Wn572hp3 Firmware No fix yet Fix from $2,3002022-08-10 HIGH 8.8 CVE-2022-35517 WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip,… Wn572hp3 Firmware No fix yet Fix from $1,9502022-08-10 CRITICAL 9.8 CVE-2022-34577 A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request. Wn535g3 Firmware No fix yet Fix from $2,3002022-07-25 HIGH 8.0 CVE-2022-34571 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute ar… Wifi Repeater Firmware No fix yet Fix from $1,9502022-07-25 HIGH 7.5 CVE-2022-34570 WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessin… Wl Wn579x3 Firmware No fix yet Fix from $1,9502022-07-25 HIGH 7.5 CVE-2022-34576 A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POS… Wn535g3 Firmware No fix yet Fix from $1,9502022-07-25 MEDIUM 6.3 CVE-2022-34573 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via access… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 MEDIUM 5.7 CVE-2022-34572 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the pag… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 MEDIUM 5.7 CVE-2022-34574 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via acc… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 MEDIUM 5.7 CVE-2022-34575 An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via acc… Wifi Repeater Firmware No fix yet Fix from $1,6002022-07-25 CRITICAL 9.8 CVE-2022-34045 Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/… Wl Wn530hg4 Firmware No fix yet Fix from $2,3002022-07-20 HIGH 7.5 CVE-2022-34046EPSS 20% An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sy… Wn533a8 Firmware No fix yet Fix from $1,9502022-07-20 HIGH 7.5 CVE-2022-34047EPSS 21% An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/… Wl Wn530hg4 Firmware No fix yet Fix from $1,9502022-07-20 MEDIUM 6.1 CVE-2022-34048EPSS 6% Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter. Wn533a8 Firmware No fix yet Fix from $1,6002022-07-20 MEDIUM 5.3 CVE-2022-34049 An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data. Wl Wn530hg4 Firmware No fix yet Fix from $1,6002022-07-20 CRITICAL 9.8 CVE-2022-2486EPSS 30% A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.c… Wl Wn535k2 Firmware No fix yet Fix from $2,3002022-07-20 CRITICAL 9.8 CVE-2022-2487EPSS 80% A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bi… Wl Wn535k2 Firmware No fix yet Fix from $2,3002022-07-20 CRITICAL 9.8 CVE-2022-2488EPSS 33% A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/… Wl Wn535k2 Firmware No fix yet Fix from $2,3002022-07-20 CRITICAL 9.8 CVE-2022-34592 Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows … Wl Wn575a3 Firmware No fix yet Fix from $2,3002022-07-07 CRITICAL 9.8 CVE-2022-31311 An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request. Aerial X 1200m Firmware No fix yet Fix from $2,3002022-06-14 HIGH 7.5 CVE-2022-31309 A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via executio… Aerial X 1200m Firmware No fix yet Fix from $1,9502022-06-14