PT-2020-13051

Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403 Description A remote buffer overflow issue exists in the "/cgi-bin/makeRequest.cgi" API endpoint, allowing an attacker to execute arbitrary machine instructions as root without authentication. Recommendations...

CVE-2020-12126: Improper Authentication

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint...

WAVLINK WL-WN530HG4 Injection Vulnerability

WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. An injection vulnerability exists in WAVLINK WL-WN530HG4 M30HG4.V5030.191116 version, which can be exploited by an attacker to execute remote code with root privileges...

WAVLINK WL-WN530HG4 has an unspecified vulnerability

WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK WL-WN530HG4 M30HG4.V5030.191116 version, which can be exploited by attackers to execute remote code with root privileges...

CVE-2020-15489

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges...

CVE-2020-15490

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. The set of affected scripts is similar to CVE-2020-12266...

CVE-2020-15490

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. The set of affected scripts is similar to CVE-2020-12266...

CVE-2020-15489

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges...

Design/Logic Flaw

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges...

Buffer overflow

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. The set of affected scripts is similar to CVE-2020-12266...

CVE-2020-15489

CVE-2020-15489 describes multiple shell metacharacter injection vulnerabilities in CGI scripts on the Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices, enabling remote code execution with root privileges. The issue is rooted in CGI script handling that allows injection of shell metacharacters, lea...

CVE-2020-15489

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges...

CVE-2020-15490

CVE-2020-15490 affects Wavlink WL-WN530HG4 (M30HG4.V5030.191116) via multiple CGI script buffer overflow vulnerabilities that allow remote code execution with root privileges. The related Red Hat CVE-2020-12266 description confirms externally accessible, unauthenticated pages exposing extensive d...

CVE-2020-15490

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. The set of affected scripts is similar to CVE-2020-12266...

PT-2020-14457

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530HG4 M30HG4.V5030.191116 Description An issue exists in the CGI scripts of the affected device, where multiple buffer overflow vulnerabilities can lead to remote code execution with root privileges. Recommendations For Wavlink...

CVE-2020-15489: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges...

PT-2020-14456

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530HG4 version M30HG4.V5030.191116 Description An issue exists in the CGI scripts of the affected device, allowing for shell metacharacter injection. This leads to remote code execution with root privileges. Recommendations For...

CVE-2020-15490: Buffer Copy without Checking Size of Input

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. The set of affected scripts is similar to CVE-2020-12266...

WAVLINK WL-WN530HG4 Information Disclosure Vulnerability

WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. A security vulnerability exists in the /cgi-bin/ExportALLSettings.sh file in WAVLINK WL-WN530HG4 M30HG4.V5030.191116 version. An attacker can exploit this vulnerability with the help of a specially...

Multiple WAVLINK Products Input Validation Error Vulnerability

WAVLINK WL-WN579G3 and others are a wireless network signal extender from China's RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WL-WN579G3 M79X3.V5030.180719 version, WL-WN575A3 RPT75A3.V4300.180801 version and WL-WN530HG4 M30HG4.V5030.191116 version. An attacker can explo...