34 matches found
CVE-2024-38894
WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...
CVE-2024-38896
WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...
CVE-2024-38892
An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component...
CVE-2024-38895
WAVLINK WN551K1'livemfg.shtml enables attackers to obtain sensitive router information...
WAVLINK WN551K1 live_mfg.shtml Interface Information Disclosure Vulnerability
The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that stems from improper authorization of the livemfg.shtml interface, which can be exploited by an attacker to obtain sensitive router...
WAVLINK WN551K1 live_check.shtml Interface Information Disclosure Vulnerability
The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that stems from improper authorization of the livecheck.shtml interface, which can be exploited by an attacker to obtain sensitive router...
WAVLINK WN551K1 /cgi-bin/nightled.cgi Command Injection Vulnerability
The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the starthour parameter of /cgi-bin/nightled.cgi failing to properly filter constructed command special characters, commands, and so...
WAVLINK WN551K1 ExportAllSettings.sh Component Information Disclosure Vulnerability
The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that originates in the ExportAllSettings.sh component, which is not sufficiently protected against sensitive information and can be exploited b...
WAVLINK WN551K1 /cgi-bin/touchlist_sync.cgi Command Injection Vulnerability
The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the IP parameter of /cgi-bin/touchlistsync.cgi failing to properly filter constructed command special characters, commands, and so on...
CVE-2024-38896
WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...
CVE-2024-38892
An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component...
CVE-2024-38894
WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...
CVE-2024-38892
The CVE-2024-38892 relates to the WAVLINK WN551K1 router, where the ExportAllSettings.sh component exposes sensitive information. The Red Hat/CNVD/CNNVD entries and other sources consistently describe an information-disclosure issue arising from ExportAllSettings.sh, enabling remote attackers to ...
PT-2024-28266 · Wavlink · Wavlink Wn551K1
Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 version not specified Description: The issue allows attackers to obtain sensitive router information through the 'live mfg.shtml' endpoint. Recommendations: For WAVLINK WN551K1, restrict access to the 'live mfg.shtml' endpoint...
PT-2024-28264 · Wavlink · Wavlink Wn551K1
Name of the Vulnerable Software and Affected Versions: Wavlink WN551K1 affected versions not specified Description: The issue allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component. Recommendations: At the moment, there is no information about a newer...
CVE-2024-38896
WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...
CVE-2024-38892
An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component...
WAVLINK WN551K1 安全漏洞
The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the IP parameter of /cgi-bin/touchlistsync.cgi failing to properly filter constructed command special characters, commands, and so on...