PT-2022-20683 · Wavlink · Wavlink Aerial X 1200M

Name of the Vulnerable Software and Affected Versions: WAVLINK AERIAL X 1200M version M79X3.V5030.180719 Description: The issue allows attackers to execute arbitrary commands via a crafted POST request to the adm.cgi endpoint. This is achieved by sending a specifically designed request to the...

CVE-2022-31845: Exposure of Resource to Wrong Sphere

A vulnerability in livecheck.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

PT-2022-20680 · Wavlink · Wavlink Aerial X 1200M

Name of the Vulnerable Software and Affected Versions: WAVLINK AERIAL X 1200M version M79X3.V5030.191012 Description: A vulnerability in the live mfg.shtml file allows attackers to obtain sensitive router information via execution of the exec cmd function. Recommendations: For version...

WAVLINK WN579 X3 安全漏洞

The WAVLINK WN579 X3 is a wireless router from the Chinese company WAVLINK. An information disclosure vulnerability exists in WAVLINK WN579 X3 M79X3.V5030.180719 version, which originates from improper authorization management in /cgi-bin/ExportAllSettings.sh. An attacker can exploit this...

WAVLINK WN535 G3 安全漏洞

The WAVLINK WN535 G3 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in the WAVLINK WN535 G3 M35G3R.V5030.180927 version, which originates from a vulnerability in livemfg.shtml. An attacker can exploit this vulnerability to obtain sensitive router informatio...

WAVLINK WN535 G3 Cross-Site Scripting Vulnerability

WAVLINK WN535 G3 is a wireless router from WAVLINK China. WAVLINK WN535 G3 suffers from a cross-site scripting vulnerability, which stems from a lack of filtering and escaping of the hostname parameter in /cgi-bin/login.cgi, and can be exploited by attackers to conduct cross-site scripting attack...

CVE-2022-30489

WAVLINK WN535 G3 was discovered to contain a cross-site scripting XSS vulnerability via the hostname parameter at /cgi-bin/login.cgi...

CVE-2022-30489

WAVLINK WN535 G3 was discovered to contain a cross-site scripting XSS vulnerability via the hostname parameter at /cgi-bin/login.cgi...

Cross site scripting

WAVLINK WN535 G3 was discovered to contain a cross-site scripting XSS vulnerability via the hostname parameter at /cgi-bin/login.cgi...

CVE-2022-30489

WAVLINK WN535 G3 was discovered to contain a cross-site scripting XSS vulnerability via the hostname parameter at /cgi-bin/login.cgi...

CVE-2022-30489

Vulnerability (CVE-2022-30489) : WAVLINK WN535 G3 (WN535 G3) is affected by a cross-site scripting (XSS) flaw in the POST parameter hostname on /cgi-bin/login.cgi. Root cause: insufficient input validation in the hostname field leading to script injection. Impact: attacker could cause arbitrary s...

WAVLINK WN535 G3 跨站脚本漏洞

WAVLINK WN535 G3 is a wireless router from WAVLINK China. WAVLINK WN535 G3 suffers from a cross-site scripting vulnerability, which stems from a lack of filtering and escaping of the hostname parameter in /cgi-bin/login.cgi, and can be exploited by attackers to conduct cross-site scripting attack...

CVE-2022-30489: Improper Neutralization of Input During Web Page Generation

WAVLINK WN535 G3 was discovered to contain a cross-site scripting XSS vulnerability via the hostname parameter at /cgi-bin/login.cgi...

CVE-2022-23900

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

CVE-2022-23900

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

Command injection

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

CVE-2022-23900

The Wavlink WL-WN531P3 router, specifically version M31G3.V5030.201204 , is susceptible to a command injection vulnerability in its API. A remote attacker can achieve unauthorized remote code execution by sending a malicious POST request to the /cgi-bin/adm.cgi endpoint. Exploitation has been obs...

CVE-2022-23900

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

Wavlink WL-WN531P3 操作系统命令注入漏洞

The WAVLINK WL-WN531P3 is a wireless router from China's RuiYin Technology WAVLINK. The Wavlink WL-WN531P3 router suffers from an operating system command injection vulnerability that allows attackers to achieve unauthorized remote code execution via a malicious POST request to /cgi-bin/adm.cgi...

PT-2022-16320 · Wavlink · Wavlink Wl-Wn531P3

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN531P3 router version M31G3.V5030.201204 Description: A command injection issue in the API of the Wavlink WL-WN531P3 router allows an attacker to achieve unauthorized remote code execution via a malicious POST request through the...