CVE-2022-2487

🗓️ 20 Jul 2022 11:35:27Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 63 Views🌐 WEB

Vulnerability found in WAVLINK WN535K2 & WN535K3, leading to os command injection

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-2487	20 Jul 202216:19	–	circl
CNNVD	WAVLINK WN535K2 和 WN535K3 操作系统命令注入漏洞	20 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection	20 Jul 202211:35	–	cvelist
Nuclei	Wavlink WN535K2/WN535K3 - OS Command Injection	29 May 202603:59	–	nuclei
NVD	CVE-2022-2487	20 Jul 202212:15	–	nvd
Prion	Command injection	20 Jul 202212:15	–	prion
RedhatCVE	CVE-2022-2487	5 Feb 202521:31	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2022-2487	14 Nov 202300:00	–	vulncheck_kev
Vulnrichment	CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection	20 Jul 202211:35	–	vulnrichment

NVD

Node

wavlink wl-wn535k2_firmwareMatch-

AND

wavlink wl-wn535k2Match-

Node

wavlink wl-wn535k3_firmwareMatch-

AND

wavlink wl-wn535k3Match-

[
  {
    "product": "WN535K2",
    "vendor": "WAVLINK",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  },
  {
    "product": "WN535K3",
    "vendor": "WAVLINK",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20nightled.cgi%20.md

Parameter	Position	Path	Description	CWE
start_hour	query param	/cgi-bin/nightled.cgi	OS command injection via manipulation of the start_hour argument in /cgi-bin/nightled.cgi	CWE-78

21 Nov 2024 07:01Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18 - 9.8

EPSS0.92252

SSVC