Lucene search
MitreCVE-2022-37149HistoryAug 30, 2022 - 3:15 p.m.
CVE-2022-37149
2022-08-3015:15:08
CWE-78
mitre
web.nvd.nist.gov
34
8
cve-2022-37149
wavlink
wl-wn575a3
rpt75a3.v4300.201217
command injection
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
72.8%
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.
Affected configurations
Node
wavlinkwl-wn575a3_firmwareMatchrpt75a3.v4300.201217
wavlinkwl-wn575a3Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wavlink | wl-wn575a3_firmware | rpt75a3.v4300.201217 | cpe:2.3:o:wavlink:wl-wn575a3_firmware:rpt75a3.v4300.201217:*:*:*:*:*:*:* |
| wavlink | wl-wn575a3 | - | cpe:2.3:h:wavlink:wl-wn575a3:-:*:*:*:*:*:*:* |
Social References
More
Related
cvelist
cvelist
CVE-2022-37149
2022-08-30 14:39:02
nvd
nvd
CVE-2022-37149
2022-08-30 15:15:08
prion
prion
Command injection
2022-08-30 15:15:00
checkpoint_advisories
checkpoint_advisories
Wavlink WL-WN575A3 Command Injection (CVE-2022-37149)
2022-11-13 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
72.8%
Related for CVE-2022-37149