Lucene search
+L

1977 matches found

OSV
OSV
added 2022/07/07 7:15 p.m.13 views

CVE-2022-34592

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

9.8CVSS7.6AI score0.03187EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/07 7:15 p.m.4 views

CVE-2022-34592

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

9.8CVSS6.2AI score0.03187EPSS
SaveExploits1References3
Prion
Prion
added 2022/07/07 7:15 p.m.23 views

Command injection

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

7.5CVSS9.9AI score0.03187EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/07/07 12:00 a.m.10 views

Wavlink WL-WN575A3 命令注入漏洞

Wavlink WL-WN575A3 is a wireless network signal extender from China RuiYin Technology Wavlink. A security vulnerability exists in the Wavlink WL-WN575A3 RPT75A3.V4300.201217 version, which stems from a command injection vulnerability discovered via the obtw function. An attacker could use this...

9.8CVSS8.8AI score0.03187EPSS
SaveExploits1References4
EUVD
EUVD
added 2022/07/07 12:00 a.m.10 views

EUVD-2022-37544

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

9.8CVSS9.9AI score0.03187EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/07/07 12:00 a.m.11 views

PT-2022-22223 · Wavlink · Wavlink Wl-Wn575A3

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN575A3 version RPT75A3.V4300.201217 Description: A command injection issue was discovered, allowing attackers to execute arbitrary commands via a crafted POST request to the obtw function. This enables attackers to send malicious...

9.8CVSS10AI score0.03187EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2022/07/07 12:00 a.m.37 views

CVE-2022-34592

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

10AI score0.03187EPSS
SaveExploits1References2
CVE
CVE
added 2022/07/07 12:00 a.m.83 views

CVE-2022-34592

The CVE-2022-34592 issue affects Wavlink WL-WN575A3 (RPT75A3.V4300.201217) with a vulnerability in the obtw function that allows command execution via a crafted POST request. The root cause is a command-injection flaw in obtw, enabling attackers to run arbitrary commands on the device. CVSS data ...

9.8CVSS9.8AI score0.03187EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.11 views

The vulnerability of the /cgi-bin/login.cgi component of the WAVLINK WN535 G3 wireless network replacer software allows a attacker to execute XSS attacks.

The vulnerability of the /cgi-bin/login.cgi component of the WAVLINK WN535 G3 wireless network repeater software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a remote attacker to perform XSS attacks...

6.4CVSS6.7AI score0.0416EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/05 2:00 p.m.4 views

CVE-2022-40621

Because the WAVLINK Quantum D4G WN531G3 running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed...

7.5CVSS7.1AI score0.00734EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/06/20 12:00 a.m.118 views

WAVLINK WN535 G3 Information Disclosure Vulnerability (CNVD-2022-61034)

WAVLINK WN535 G3 is a wireless router from WAVLINK China.WAVLINK WN535 G3 version M35G3R.V5030.180927 is vulnerable to an information disclosure vulnerability that stems from improper authorization management on the livecheck.shtml page, which could be exploited by an attacker to obtain sensitive...

7.5CVSS3AI score0.08698EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.50 views

WAVLINK AERIAL X 1200M Command Injection Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to a command injection vulnerability in version M79X3.V5030.180719, which stems from the execution of a POST received in adm.cgi spliced directly into a system function, which can be exploited by an attacker to exploit this...

10CVSS6.7AI score0.02954EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.122 views

WAVLINK WN579 X3 Information Disclosure Vulnerability (CNVD-2022-61036)

The WAVLINK WN579 X3 is a wireless router from the Chinese company WAVLINK. An information disclosure vulnerability exists in WAVLINK WN579 X3 M79X3.V5030.180719 version, which originates from improper authorization management in /cgi-bin/ExportAllSettings.sh. An attacker can exploit this...

7.5CVSS7AI score0.06555EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.86 views

WAVLINK AERIAL X 1200M Information Disclosure Vulnerability (CNVD-2022-61032)

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to an information disclosure vulnerability in version M79X3.V5030.180719, which stems from improper authorization management on the livecheck.shtml page, and could be exploited by an attacker to The vulnerability is caused ...

7.5CVSS3.5AI score0.01695EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.103 views

WAVLINK WN535 G3 Information Disclosure Vulnerability

WAVLINK WN535 G3 is a wireless router from WAVLINK China.WAVLINK WN535 G3 version M35G3R.V5030.180927 is vulnerable to an information disclosure vulnerability that stems from improper authorization management on the livemfg.shtml page, which could be exploited by an attacker to obtain sensitive...

7.5CVSS3AI score0.07429EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.38 views

WAVLINK AERIAL X 1200M Information Disclosure Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, has an information disclosure vulnerability in version M79X3.V5030.191012, which stems from improper authorization management in the livemfg.shtml page, and can be exploited by attackers to The livemfg.shtml page can be used to execute t...

7.5CVSS4.4AI score0.01695EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/14 2:15 p.m.7 views

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

10CVSS7.7AI score0.02954EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/14 2:15 p.m.4 views

CVE-2022-31845

A vulnerability in livecheck.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

7.5CVSS5.6AI score0.08698EPSS
SaveExploits1References4
OSV
OSV
added 2022/06/14 2:15 p.m.11 views

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

9.8CVSS6AI score0.02954EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/14 2:15 p.m.7 views

CVE-2022-31309

A vulnerability in livecheck.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function...

7.5CVSS5.9AI score0.01695EPSS
SaveExploits1References1
Rows per page
Query Builder