CVE-2022-35522

creationtimestamp| type| source ---|---|--- 2022-08-11 00:32:20+00:00| seen| https://t.me/cibsecurity/47913...

CVE-2022-35522

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: pppusername, ppppasswd, rwangateway, rwanmask and rwanip, which leads to command injection in page /wan.shtml...

CVE-2022-35522

The CVE-2022-35522 issue affects WAVLINK devices (WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3). Root cause: adm.cgi does not filter on parameters ppp_username, ppp_passwd, rwan_gateway, rwan_mask, and rwan_ip, enabling command injection in the /wan.shtml page. Impact is described as high in CVSS...

CVE-2022-35522

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: pppusername, ppppasswd, rwangateway, rwanmask and rwanip, which leads to command injection in page /wan.shtml...