PT-2025-2568

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple directory traversal vulnerabilities exist in the nas.cgi add dir functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make an...

PT-2025-2567

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple directory traversal vulnerabilities exist in the nas.cgi add dir functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make an...

PT-2025-2566

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 M33A8.V5030.210505 Description: Multiple command execution vulnerabilities exist in the nas.cgi add dir functionality. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an...

WAVLINK AC3000 has a path traversal vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A path traversal vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the diskpart parameter of the nas.cgi adddir function that fails to correctly filter for special elements in the resource or file...

PT-2025-2565

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple command execution vulnerabilities exist in the nas.cgi add dir functionality. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an...