CVE-2022-35517

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: webpskValue, wlMethod, wlanssid, EncrypType, rwanip, rwanmask, rwangateway, pppusername, ppppasswd and pppsetver, which leads to command injection in page /wizardroutermesh.shtml...

CVE-2022-35517

CVE-2022-35517 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3 and WN531P3 due to lack of input filtering in adm.cgi. The vulnerability, described as unfiltered parameters web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd, ppp_setver, e...