Wavlink WL-WN575A3 Command Injection (CVE-2022-37149)

A command injection vulnerability exists in Wavlink WL-WN575A3. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-37149

creationtimestamp| type| source ---|---|--- 2022-08-30 18:35:37+00:00| seen| https://t.me/cibsecurity/49055...

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-37149

The CVE-2022-37149 issue affects WAVLINK WL-WN575A3 (RPT75A3.V4300.201217). A command-injection vulnerability exists in the adm.cgi endpoint, allowing an attacker to execute arbitrary commands via the username parameter. Root cause is improper handling of user-supplied input in adm.cgi. Impact, p...