CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

CVE-2022-2487

WAVLINK WN535K2 and WN535K3 routers are affected by OS command injection in /cgi-bin/nightled.cgi due to manipulation of the start_hour parameter. The underlying issue allows remote code execution, with potential full system compromise, data modification/leakage, and control of the device as desc...

CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2022-2486

CVE-2022-2486 affects WAVLINK WN535K2 and WN535K3 routers. A vulnerability in an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade allows OS command injection via manipulation of the argument key. Documents describe that an attacker can execute commands, access/modify data, obtain sensitive...

CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

PT-2022-16952 · Wavlink · Wavlink Wn535G3 +1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN535K2 WAVLINK WN535K3 Description: A critical issue affects the unknown processing of the file /cgi-bin/touchlist sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the...

PT-2022-21985

Name of the Vulnerable Software and Affected Versions Wavlink WN533A8 version M33A8.V5030.190716 Description A reflected cross-site scripting XSS issue was found, which can be exploited via the login page parameter. This allows an attacker to inject malicious scripts into the website, potentially...

CVE-2022-34049: Files or Directories Accessible to External Parties

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...

CVE-2022-34048: Improper Neutralization of Input During Web Page Generation

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting XSS vulnerability via the loginpage parameter...

PT-2022-21983 · Wavlink · Wavlink Wn533A8

Name of the Vulnerable Software and Affected Versions: Wavlink WN533A8 version M33A8.V5030.190716 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/sysinit.shtml?r=52300" by searching for logincheckuser. Recommendations...

WAVLINK WN533A8 安全漏洞

WAVLINK WN533A8 is a wireless router from China RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK WN533A8 M33A8.V5030.190716 version, which stems from a vulnerability that allows an attacker to view usernames and passwords...

PT-2022-16941

Name of the Vulnerable Software and Affected Versions WAVLINK WN535K2 WAVLINK WN535K3 Description A critical issue has been identified, affecting the /cgi-bin/nightled.cgi file. The manipulation of the start hour argument leads to os command injection. The exploit has been disclosed to the public...

WAVLINK WN530HG4 跨站脚本漏洞

The WAVLINK WN530HG4 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WN530HG4 M33A8.V5030.190716 version, which stems from a security issue with the loginpage parameter...

WAVLINK WN530HG4 安全漏洞

The WAVLINK WN530HG4 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in the WAVLINK WN530HG4 M30HG4.V5030.191116 version, which originates from a vulnerability that allows an unauthenticated attacker to download log files and configuration data...

CVE-2022-34046: Incorrect Authorization

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

WAVLINK WN535K2 和 WN535K3 操作系统命令注入漏洞

The WAVLINK WN535K2 and WAVLINK WN535K3 are both wireless routers from the Chinese company WAVLINK. A security vulnerability exists in the WAVLINK WN535K2 and WN535K3 versions, which stems from certain unknown processing in /cgi-bin/touchlistsync.cgi, where manipulation of IP parameters may resul...

CVE-2022-2487: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...