26 matches found
CVE-2024-48705
概要 最近のWavlink AC1200（モデル：WL-WN532A3）のセキュリティ調査中に、「/cgi-bin/adm.cgi」エンドポイントにおいて認証後のコマンドインジェクションの脆弱性が特定されました。この脆弱性により、ルーターの認証情報を入手した悪意のある攻撃者が任意のシェルコマンドを実行できる可能性があります。現在、この脆弱性に対してCVE番号の割り当てが保留されています。 ファームウェアの抽出 Wavlink...
CVE-2020-12124
IoT 익스플로잇 해부: Hands-On부터 RCE까지 원본: https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce David E. Baker 작성, 2023년 6월 1일 게시 서문 본 연구는 2020년 6월 기준 Wavlink Wireless-AC1200 기가비트 라우터의 펌웨어를 대상으로 합니다. 여기서 논의된 취약점은 공급업체에서 패치되었을 수도 있고 그렇지 않을 수도 있지만, 이는 여정 자체가 결론보다...
EUVD-2021-31105
Malicious code in bioql PyPI...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
CVE-2024-48705
The Wavlink AC1200 (Model: WL-WN532A3) router is vulnerable to post-authentication command injection in firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 . The flaw exists in the set_sys_adm function of the adm.cgi binary, where the newpass field is improperly sanitized. While the syste...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
PT-2025-35572
Name of the Vulnerable Software and Affected Versions: Wavlink AC1200 versions M32A3 V1410 230602 and M32A3 V1410 240222 Description: The Wavlink AC1200 is susceptible to a post-authentication command injection when resetting the password. The issue resides within the adm.cgi binary, specifically...
CVE-2024-48705: Improper Neutralization of Special Elements used in a Command
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
多款WAVLINK产品安全漏洞
WAVLINK AC1200 and others are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router.WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 AC1200 version has a securit...
WAVLINK AC1200 has an unspecified vulnerability
WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...
CVE-2021-44260
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
CVE-2021-44260
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
CVE-2021-44259
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...
CVE-2021-44259
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...
CVE-2021-44260
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
Authentication flaw
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
Design/Logic Flaw
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...
CVE-2021-44259
CVE-2021-44259 concerns WAVLINK AC1200 (WAVLINK-A42W-1.27.6-20180418): unauthenticated access to the wx.html page allows an unauthenticated attacker to access the page and connect to the device as a friend of the owner. The vulnerability is triggered through direct access to this page without cre...
CVE-2021-44259
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...