CVE-2022-35533

The CVE-2022-35533 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 via the qos.cgi page, where the qos.shtml endpoint lacks filtering on the cli_list and cli_num parameters, enabling command injection. The vulnerability is documented with high severity (CVSS v3.1: 9.8, Netw...

CVE-2022-35534

Concrete details found: CVE-2022-35534 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3. The root cause is lack of input filtering in wireless.cgi for parameters hiddenSSID32g and SSID2G2, enabling command injection on the /wifi_multi_ssid.shtml page. Initial and Red Hat entries concu...

CVE-2022-35535

CVE-2022-35535 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3 and WN531P3. The vulnerability stems from lack of filtering on the macAddr parameter in wireless.cgi, enabling command injection on /wifi_mesh.shtml. The coordinated documents corroborate the affected models and the vulnerability ...

CVE-2022-35536

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qosbandwith and qosdat, which leads to command injection in page /qos.shtml...

CVE-2022-35536

CVE-2022-35536 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. The root cause is lack of input filtering on qos.cgi parameters qos_bandwith and qos_dat, enabling command injection on the /qos.shtml page. NVD lists this as CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, ...

CVE-2022-35537

CVE-2022-35537 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3; the wireless.cgi page lacks filtering on mac_5g and Newname parameters, enabling command injection on /wifi_mesh.shtml. Root cause: unsanitized input in wireless.cgi. Impact: high (per CVSS 3.1: Network, Privileges None,...

CVE-2022-35538

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: deletelist, deletealmac, bdeletelist and bdeletealmac, which leads to command injection in page /wifimesh.shtml...

PT-2022-22891 · Wavlink · Wavlink Wn530H4 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue affects the qos.cgi page, specifically the /qos.shtml endpoint, where the cli list and cli num parameters have no filtering, leading to...

PT-2022-22879 · Wavlink · Wavlink Wn530H4 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue concerns the lack of filtering on certain parameters in the adm.cgi file, specifically: web pskValue, wl Method, wlan ssid, EncrypType, rw...

PT-2022-22884 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to the firewall.cgi having no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled,...

PT-2022-22880 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on parameters: User1Passwd and User1 in the nas.cgi file, which leads to command injection in the /nas...

PT-2022-22895 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on parameters: mac 5g and Newname in the wireless.cgi file, which leads to command injection in the page...

PT-2022-22887 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on parameters in the adm.cgi file, which leads to command injection in the /wizard rep.shtml page. The...

Wavlink WN533A8 - Cross-Site Scripting (XSS)

Exploit Title: Wavlink WN533A8 - Cross-Site Scripting XSS Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34048 Tested on: Windows Poc code history.pushState'', '', '/'...

Wavlink WN533A8 Password Disclosure

Exploit Title: Wavlink WN533A8 - Password Disclosure Date: 2022-06-12 Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34046 Tested on: Windows Exploit...

Wavlink WN533A8 - Password Disclosure Vulnerability

Exploit Title: Wavlink WN533A8 - Password Disclosure Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34046 Tested on: Windows Exploit view-source:http://IPADDRESS/sysinit.shtml search for...

Wavlink WN533A8 - Cross-Site Scripting Vulnerability

Exploit Title: Wavlink WN533A8 - Cross-Site Scripting XSS Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34048 Tested on: Windows Poc code history.pushState'', '', '/'...

Wavlink WN533A8 Cross Site Scripting

Exploit Title: Wavlink WN533A8 - Cross-Site Scripting XSS Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34048 Tested on: Windows Poc code history.pushState'', '', '/'...

Wavlink WN533A8 - Password Disclosure

Exploit Title: Wavlink WN533A8 - Password Disclosure Date: 2022-06-12 Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34046 Tested on: Windows Exploit...

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...