WAVLINK

172 results · Feed

• Unscored —
  CVE-2023-32622

  Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with a…

  WAVLINK WL-WN531AX2
  Jun 30, 2023
• Unscored —
  CVE-2023-32621

  WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary …

  WAVLINK WL-WN531AX2
  Jun 30, 2023
• Unscored —
  CVE-2023-32620

  Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attac…

  WAVLINK WL-WN531AX2
  Jun 30, 2023
• Unscored —
  CVE-2023-32613

  Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a …

  WAVLINK WL-WN531AX2
  Jun 30, 2023
• Unscored —
  CVE-2023-32612

  Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which m…

  WAVLINK WL-WN531AX2
  Jun 30, 2023
• Medium 4.7
  CVE-2023-3380 Scanner template

  Wavlink WN579X3 Ping Test adm.cgi injection

  A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to lau…

  WAVLINK WN579X3
  Jun 23, 2023
• Unscored —
  CVE-2022-40623

  WAVLINK Quantum D4G (WN531G3) CSRF

  The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.

  WAVLINK WN531G3
  Sep 13, 2022
• Unscored —
  CVE-2022-40621

  WAVLINK Quantum D4G (WN531G3) Pass-The-Hash

  Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient ne…

  WAVLINK WN531G3
  Sep 13, 2022
• Unscored —
  CVE-2022-40622

  WAVLINK Quantum D4G (WN531G3) Session Management by IP Address

  The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the s…

  WAVLINK WN531G3
  Sep 13, 2022
• High 8.0
  CVE-2022-2488 Scanner template EPSS 33%

  WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

  A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been di…

  WAVLINK WN535K2 WN535K3
  Jul 20, 2022
• High 8.0
  CVE-2022-2487 Scanner template EPSS 79%

  WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

  A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has bee…

  WAVLINK WN535K3 WN535K2
  Jul 20, 2022
• High 8.0
  CVE-2022-2486 Scanner template EPSS 30%

  WAVLINK WN535K2/WN535K3 os command injection

  A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disc…

  WAVLINK WN535K3 WN535K2
  Jul 20, 2022