Product:

Wn579x3_firmware

(Wavlink)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 5
Date Id Summary Products Score Patch Annotated
2023-06-23 CVE-2023-3380 A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Wn579x3_firmware 9.8
2022-06-14 CVE-2022-31847 A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request. Wn579x3_firmware 7.5
2020-04-27 CVE-2020-12266 An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed externally without any authentication. All the pages follow the naming convention live_(string).shtml. Among the information disclosed is: interface status logs, IP address of the device, MAC address of... Jetstream_ac3000_firmware, Jetstream_erac3000_firmware, Wl\-Wn530hg4_firmware, Wl\-Wn575a3_firmware, Wl\-Wn579g3_firmware, Wn530h4_firmware, Wn531a6_firmware, Wn531g3_firmware, Wn533a8_firmware, Wn535g3_firmware, Wn551k1_firmware, Wn578a2_firmware, Wn579g3_firmware, Wn579x3_firmware, Wn57x93_firmware 7.5
2020-05-07 CVE-2020-10974 An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000 Jetstream_ac3000_firmware, Jetstream_erac3000_firmware, Wl\-Wn575a3_firmware, Wl\-Wn579g3_firmware, Wn530h4_firmware, Wn531a6_firmware, Wn535g3_firmware, Wn572hg3_firmware, Wn575a4_firmware, Wn578a2_firmware, Wn579g3_firmware, Wn579x3_firmware, Wn57x93_firmware 7.5
2021-02-09 CVE-2020-13117 Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request. Wn575a4_firmware, Wn579x3_firmware 9.8