CVE-2022-35525

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter ledswitch, which leads to command injection in page /ledonoff.shtml...

CVE-2022-35525

CVE-2022-35525 affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3. adm.cgi has no filtering on the led_switch parameter, enabling command injection via the /ledonoff.shtml page. This is documented in multiple sources (NVD, Red Hat advisory, CVE listing, and CNNVD), indicating a consiste...