4 matches found
CVE-2022-35526
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...
9.8CVSS7.5AI score0.02278EPSS
SaveExploits1References1
CVE-2022-35526
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...
9.8CVSS7.3AI score0.02278EPSS
SaveExploits1References2
CVE-2022-35526
CVE-2022-35526 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. The login.cgi script does not filter the key parameter, enabling command injection on the /login.shtml page. Root cause: lack of input validation on a parameter used by login.cgi. Impact (per sources): high-severity ...
9.8CVSS9.6AI score0.02278EPSS
SaveIn wildExploits1References1Affected Software1
20