Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Wn535g3_firmware
(Wavlink)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 23 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-08-10 | CVE-2022-35517 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 8.8 | ||
| 2022-08-10 | CVE-2022-35518 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35519 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35520 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35521 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35522 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command injection in page /wan.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35523 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35524 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35525 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 | ||
| 2022-08-10 | CVE-2022-35526 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml. | Wn530h4_firmware, Wn531p3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn572hp3_firmware | 9.8 |