CVE-2022-35525

CVE-2022-35525 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3. adm.cgi has no filtering on the led_switch parameter, enabling command injection via the /ledonoff.shtml page. This is documented in multiple sources (NVD, Red Hat advisory, CVE listing, and CNNVD), indicating a consiste...

CVE-2022-35517: Undefined Security Weakness

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: webpskValue, wlMethod, wlanssid, EncrypType, rwanip, rwanmask, rwangateway, pppusername, ppppasswd and pppsetver, which leads to command injection in page /wizardroutermesh.shtml...

CVE-2022-35524: Undefined Security Weakness

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlansignal, webpskValue, selEncrypTyp, selAutomode, wlanbssid, wlanssid and wlanchannel, which leads to command injection in page /wizardrep.shtml...

PT-2022-22879 · Wavlink · Wavlink Wn530H4 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue concerns the lack of filtering on certain parameters in the adm.cgi file, specifically: web pskValue, wl Method, wlan ssid, EncrypType, rw...

PT-2022-22885 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on certain parameters in the adm.cgi file, specifically ppp username, ppp passwd, rwan gateway, rwan mas...

PT-2022-22887 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on parameters in the adm.cgi file, which leads to command injection in the /wizard rep.shtml page. The...

CVE-2022-35522: Undefined Security Weakness

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: pppusername, ppppasswd, rwangateway, rwanmask and rwanip, which leads to command injection in page /wan.shtml...

CVE-2022-35525: Undefined Security Weakness

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter ledswitch, which leads to command injection in page /ledonoff.shtml...

CVE-2022-34577

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-34577

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-34577

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-34577

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-34577

CVE-2022-34577 affects WAVLINK WN535 G3 (firmware M35G3R.V5030.180927) due to an adm.cgi component vulnerability that allows arbitrary code execution via a crafted POST request. Multiple connected sources confirm a remote-code-execution vector through POST to adm.cgi, with high impact (C/H/I/A) a...

PT-2022-22216 · Wavlink · Wavlink Wn535G3

Name of the Vulnerable Software and Affected Versions: WAVLINK WN535 G3 version M35G3R.V5030.180927 Description: A vulnerability in the adm.cgi component allows attackers to execute arbitrary code via a crafted POST request. Recommendations: For WAVLINK WN535 G3 version M35G3R.V5030.180927,...

WAVLINK WN535 G3 安全漏洞

The WAVLINK WN535 G3 is a wireless router from China-based RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK WN535 G3's firmware version M35G3R.V5030.180927, which stems from its adm.cgi component that allows an attacker to execute arbitrary code via a crafted POST request...

CVE-2022-34577: Undefined Security Weakness

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

Cross site request forgery (csrf)

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-31311

CVE-2022-31311 affects WAVLINK AERIAL X 1200M (firmware M79X3.V5030.180719). The adm.cgi component processes a crafted POST and enables arbitrary command execution via a POST payload, due to the command-injection pathway described in CNVD-2022-61031 and corroborated by Red Hat/NVD entries. Impact...