Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2021-31105

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01928EPSS
Exploits1References1
NVD
NVD
added 2025/09/02 3:15 p.m.5 views

CVE-2024-48705

Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...

6.5CVSS0.03324EPSS
Exploits1References1
CVE
CVE
added 2025/09/02 12:0 a.m.18 views

CVE-2024-48705

CVE-2024-48705 affects Wavlink AC1200 firmware versions M32A3_V1410_230602 and M32A3_V1410_240222. The issue is a post-authentication command injection in the adm.cgi binary, specifically in set_sys_adm, caused by insufficient sanitization of the newpass field during password reset. Impact is sta...

6.5CVSS6.9AI score0.03324EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.5 views

PT-2025-35572

Name of the Vulnerable Software and Affected Versions: Wavlink AC1200 versions M32A3 V1410 230602 and M32A3 V1410 240222 Description: The Wavlink AC1200 is susceptible to a post-authentication command injection when resetting the password. The issue resides within the adm.cgi binary, specifically...

6.5CVSS6.9AI score0.03324EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/09/02 12:0 a.m.10 views

CVE-2024-48705

Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...

0.03324EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/08/10 12:0 a.m.5 views

多款WAVLINK产品安全漏洞

WAVLINK AC1200 and others are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router.WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 AC1200 version has a securit...

9.8CVSS8.2AI score0.01509EPSS
Exploits1References2
CNVD
CNVD
added 2022/03/18 12:0 a.m.20 views

WAVLINK AC1200 has an unspecified vulnerability

WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...

9.8CVSS3.8AI score0.01928EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/17 1:15 p.m.2 views

CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

7.5CVSS7.2AI score0.07573EPSS
Exploits1References3
NVD
NVD
added 2022/03/17 1:15 p.m.16 views

CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

7.5CVSS0.07573EPSS
Exploits1References1
OSV
OSV
added 2022/03/17 1:15 p.m.5 views

CVE-2021-44259

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

9.8CVSS7.3AI score0.01928EPSS
Exploits1References1
NVD
NVD
added 2022/03/17 1:15 p.m.15 views

CVE-2021-44259

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

9.8CVSS0.01928EPSS
Exploits1References1
OSV
OSV
added 2022/03/17 1:15 p.m.7 views

CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

7.5CVSS5.8AI score0.07573EPSS
Exploits1References1
Prion
Prion
added 2022/03/17 1:15 p.m.22 views

Design/Logic Flaw

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

7.5CVSS9.2AI score0.01928EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/03/17 1:15 p.m.17 views

Authentication flaw

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

5CVSS7.4AI score0.07573EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/03/17 12:13 p.m.84 views

CVE-2021-44259

CVE-2021-44259 concerns WAVLINK AC1200 (WAVLINK-A42W-1.27.6-20180418): unauthenticated access to the wx.html page allows an unauthenticated attacker to access the page and connect to the device as a friend of the owner. The vulnerability is triggered through direct access to this page without cre...

9.8CVSS9.2AI score0.01928EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/17 12:13 p.m.20 views

CVE-2021-44259

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

9.5AI score0.01928EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/03/17 12:11 p.m.18 views

CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

7.6AI score0.07573EPSS
Exploits1References1
CVE
CVE
added 2022/03/17 12:11 p.m.103 views

CVE-2021-44260

WAVLINK AC1200 (model WAVLINK-A42W, firmware 1.27.6-20180418) is vulnerable via the live_mfg.html page. The issue allows remote, unauthenticated access to this page, exposing sensitive information about the router manager. The CVE is CVE-2021-44260. Technical details across sources confirm an inf...

7.5CVSS7.3AI score0.07573EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.3 views

WAVLINK AC1200 访问控制错误漏洞

WAVLINK AC1200 is a dual-band high power wireless router from China RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 version, which stems from a lack of protection and restriction of privileges for sensitive information in livemfg.html...

7.5CVSS7.3AI score0.07573EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.4 views

WAVLINK AC1200 访问控制错误漏洞

WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...

9.8CVSS5.7AI score0.01928EPSS
Exploits1References2
Rows per page
Query Builder