CVE-2024-39783

creationtimestamp| type| source ---|---|--- 2025-01-14 15:18:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkd4s4od2c 2025-01-14 15:48:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfplypho7s2w 2025-01-14 15:49:59+00:00| seen|...

CVE-2024-39783

Multiple OS command injection vulnerabilities exist in the adm.cgi schreboot functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command...

CVE-2024-39783

The CVE-2024-39783 entry concerns the Wavlink AC3000 (M33A8.V5030.210505) adm.cgi sch_reboot() vulnerability. The flaw stems from unsafely handling POST parameters restart_hour, restart_min, and restart_week in sch_reboot, which are combined into a string that is written to the SCH_Reboot nvram i...