2 matches found
CVE-2022-35521
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /mansecurity.shtml...
9.8CVSS7.5AI score0.02258EPSS
SaveExploits1References1
CVE-2022-35521
The CVE-2022-35521 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 devices, where firewall.cgi does not filter parameters remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled, and blockSynFloodEnabled. This unfiltered input enables command injection in the...
9.8CVSS9.6AI score0.02258EPSS
SaveExploits1References1Affected Software1
20