Browse CVEs

HIGH 7.5 CVE-2022-31845EPSS 9% A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of … Wn535g3 Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31846EPSS 7% A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of th… Wn535g3 Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31847EPSS 6% A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a… Wn579x3 Firmware No fix yet Fix from $1,9502022-06-14 HIGH 7.5 CVE-2022-31308 A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution … Aerial X 1200m Firmware No fix yet Fix from $1,9502022-06-14 MEDIUM 6.1 CVE-2022-30489 WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi. Wn535g3 Firmware No fix yet Fix from $1,6002022-05-13 CRITICAL 9.8 CVE-2022-23900 A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized… Wl Wn531p3 Firmware No fix yet Fix from $2,3002022-04-07 CRITICAL 9.8 CVE-2021-44259 A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access thi… Wl Wn531g3 Firmware No fix yet Fix from $2,3002022-03-17 HIGH 7.5 CVE-2021-44260EPSS 7% A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to acce… Wl Wn531g3 Firmware No fix yet Fix from $1,9502022-03-17 CRITICAL 9.8 CVE-2020-13117EPSS 69% Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a lo… Wn575a4 Firmware after 2020-05-15 Fix from $2,3002021-02-09 CRITICAL 9.8 CVE-2020-12124EPSS 75% A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to e… Wn530h4 Firmware Mitigation only Fix from $2,3002020-10-02 CRITICAL 9.8 CVE-2020-12125 A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execu… Wn530h4 Firmware Mitigation only Fix from $2,3002020-10-02 CRITICAL 9.8 CVE-2020-12126 Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router s… Wn530h4 Firmware Mitigation only Fix from $2,3002020-10-02 HIGH 8.1 CVE-2020-12123 CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, beca… Wn530h4 Firmware Mitigation only Fix from $1,9502020-10-02 HIGH 7.5 CVE-2020-12127EPSS 7% An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to… Wn530h4 Firmware Mitigation only Fix from $1,9502020-10-02 CRITICAL 9.8 CVE-2020-15489 An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scrip… Wl Wn530hg4 Firmware Mitigation only Fix from $2,3002020-07-01 CRITICAL 9.8 CVE-2020-15490 An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to… Wl Wn530hg4 Firmware Mitigation only Fix from $2,3002020-07-01 HIGH 8.8 CVE-2020-10971 An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the sup… Wl Wn575a3 Firmware Mitigation only Fix from $1,9502020-05-07 HIGH 7.5 CVE-2020-10972 An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentic… Wn530hg4 Firmware Mitigation only Fix from $1,9502020-05-07 HIGH 7.5 CVE-2020-10973EPSS 8% An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a cr… Wn530hg4 Firmware Mitigation only Fix from $1,9502020-05-07 HIGH 7.5 CVE-2020-10974 An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, includi… Wl Wn575a3 Firmware Mitigation only Fix from $1,9502020-05-07 HIGH 7.5 CVE-2020-12266 An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system informa… Wl Wn579g3 Firmware Mitigation only Fix from $1,9502020-04-27