CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

CVE-2024-38896

WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...

CVE-2024-38892

An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component...

CVE-2024-38895

WAVLINK WN551K1'livemfg.shtml enables attackers to obtain sensitive router information...

WAVLINK WN551K1 /cgi-bin/touchlist_sync.cgi Command Injection Vulnerability

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the IP parameter of /cgi-bin/touchlistsync.cgi failing to properly filter constructed command special characters, commands, and so on...

WAVLINK WN551K1 live_mfg.shtml Interface Information Disclosure Vulnerability

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that stems from improper authorization of the livemfg.shtml interface, which can be exploited by an attacker to obtain sensitive router...

WAVLINK WN551K1 ExportAllSettings.sh Component Information Disclosure Vulnerability

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that originates in the ExportAllSettings.sh component, which is not sufficiently protected against sensitive information and can be exploited b...

WAVLINK WN551K1 /cgi-bin/nightled.cgi Command Injection Vulnerability

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the starthour parameter of /cgi-bin/nightled.cgi failing to properly filter constructed command special characters, commands, and so...

WAVLINK WN551K1 live_check.shtml Interface Information Disclosure Vulnerability

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that stems from improper authorization of the livecheck.shtml interface, which can be exploited by an attacker to obtain sensitive router...

CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

CVE-2024-38892

An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component...

CVE-2024-38896

WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...

WAVLINK WN551K1 安全漏洞

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from an information disclosure vulnerability that originates in the ExportAllSettings.sh component, which is not sufficiently protected against sensitive information and can be exploited b...

WAVLINK WN551K1 安全漏洞

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the IP parameter of /cgi-bin/touchlistsync.cgi failing to properly filter constructed command special characters, commands, and so on...

CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

CVE-2024-38894

The WAVLINK WN551K1 wireless router is vulnerable to a command injection vulnerability. The flaw exists because the /cgi-bin/touchlist_sync.cgi API endpoint fails to properly filter command special characters within the IP parameter. An attacker could potentially exploit this to execute arbitrary...

CVE-2024-38896

The WAVLINK WN551K1 wireless router is vulnerable to a command injection vulnerability due to improper neutralization of special elements in the start_hour parameter of the /cgi-bin/nightled.cgi API endpoint. An attacker can exploit this flaw to execute arbitrary commands on the device. While spe...

CVE-2024-38897

WAVLINK WN551K1'livecheck.shtml enables attackers to obtain sensitive router information...

CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

PT-2024-28267 · Wavlink · Wavlink Wn551K1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 affected versions not specified Description: A command injection issue was found, which can be exploited through the start hour parameter of the "/cgi-bin/nightled.cgi" API endpoint. Recommendations: As a temporary workaround,...