CVE-2022-23900

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

Wavlink WL-WN531P3 Command Injection (CVE-2022-23900)

A command injection vulnerability exists in Wavlink WL-WN531P3. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-23900

creationtimestamp| type| source ---|---|--- 2022-04-07 14:31:44+00:00| seen| https://t.me/cibsecurity/40284 2026-06-23 14:06:16+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b07f6d2f-6dba-4bb3-99a2-72d014d56af9 2026-06-30 11:39:34+00:00| exploited|...

CVE-2022-23900

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

CVE-2022-23900

CVE-2022-23900 affects the Wavlink WL-WN531P3 router (version M31G3.V5030.201204). A command-injection flaw in the device API allows an attacker to perform unauthorized remote code execution via a malicious POST to /cgi-bin/adm.cgi. Impact is described in sources as remote code execution with net...