1984 matches found
CVE-2022-35518
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nasdisk.shtml...
CVE-2022-35519
The CVE-2022-35519 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. Root cause: firewall.cgi does not filter the add_mac parameter, enabling command injection on the /cli_black_list.shtml page. Impact details are stated in the connected Red Hat and CVE records, indicating t...
CVE-2022-35519
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter addmac, which leads to command injection in page /cliblacklist.shtml...
CVE-2022-35520
CVE-2022-35520 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 where the api.cgi component does not filter the hidden ufconf parameter, which exists in the CGI binary but not in POST data, enabling command injection on the /ledonoff.shtml page. Public references in the connected ...
CVE-2022-35520
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml...
CVE-2022-35521
The CVE-2022-35521 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 devices, where firewall.cgi does not filter parameters remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled, and blockSynFloodEnabled. This unfiltered input enables command injection in the...
CVE-2022-35521
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /mansecurity.shtml...
CVE-2022-35522
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: pppusername, ppppasswd, rwangateway, rwanmask and rwanip, which leads to command injection in page /wan.shtml...
CVE-2022-35522
The CVE-2022-35522 issue affects WAVLINK devices (WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3). Root cause: adm.cgi does not filter on parameters ppp_username, ppp_passwd, rwan_gateway, rwan_mask, and rwan_ip, enabling command injection in the /wan.shtml page. Impact is described as high in CVSS...
CVE-2022-35523
CVE-2022-35523 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. The vulnerability is due to no filtering on the del_mac and flag parameters in the firewall.cgi, enabling command injection via the /cli_black_list.shtml page. The root cause is improper input validation in the firew...
CVE-2022-35523
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter delmac and parameter flag, which leads to command injection in page /cliblacklist.shtml...
CVE-2022-35524
The CVE-2022-35524 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 devices. Root cause: adm.cgi lacks filtering on multiple parameters (wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid, wlan_channel), enabling command injection on the /wizard_re...
CVE-2022-35524
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlansignal, webpskValue, selEncrypTyp, selAutomode, wlanbssid, wlanssid and wlanchannel, which leads to command injection in page /wizardrep.shtml...
CVE-2022-35525
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter ledswitch, which leads to command injection in page /ledonoff.shtml...
CVE-2022-35525
CVE-2022-35525 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3. adm.cgi has no filtering on the led_switch parameter, enabling command injection via the /ledonoff.shtml page. This is documented in multiple sources (NVD, Red Hat advisory, CVE listing, and CNNVD), indicating a consiste...
CVE-2022-35526
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...
CVE-2022-35526
CVE-2022-35526 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. The login.cgi script does not filter the key parameter, enabling command injection on the /login.shtml page. Root cause: lack of input validation on a parameter used by login.cgi. Impact (per sources): high-severity ...
CVE-2022-35533
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: clilist and clinum, which leads to command injection in page /qos.shtml...
CVE-2022-35533
The CVE-2022-35533 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 via the qos.cgi page, where the qos.shtml endpoint lacks filtering on the cli_list and cli_num parameters, enabling command injection. The vulnerability is documented with high severity (CVSS v3.1: 9.8, Netw...