CVE-2022-35533

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: clilist and clinum, which leads to command injection in page /qos.shtml...

CVE-2022-35533

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: clilist and clinum, which leads to command injection in page /qos.shtml...

CVE-2022-35533

The CVE-2022-35533 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 via the qos.cgi page, where the qos.shtml endpoint lacks filtering on the cli_list and cli_num parameters, enabling command injection. The vulnerability is documented with high severity (CVSS v3.1: 9.8, Netw...