CVE-2024-37186

An os command injection vulnerability exists in the adm.cgi setledonoff functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-37186

creationtimestamp| type| source ---|---|--- 2025-01-14 15:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpk7kfuqn2f...

CVE-2024-37186

An os command injection vulnerability exists in the adm.cgi setledonoff functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-37186

CVE-2024-37186 affects Wavlink AC3000 M33A8.V5030.210505. Talos details an OS command-injection in adm.cgi set_ledonoff(): an authenticated HTTP request can trigger arbitrary command execution via the led_cmd parameter, leading to high impact. Affected version and firmware: Wavlink AC3000 M33A8.V...

Wavlink AC3000 adm.cgi set_ledonoff() OS command injection vulnerability

Talos Vulnerability Report TALOS-2024-2032 Wavlink AC3000 adm.cgi setledonoff OS command injection vulnerability January 14, 2025 CVE Number CVE-2024-37186 SUMMARY An os command injection vulnerability exists in the adm.cgi setledonoff functionality of Wavlink AC3000 M33A8.V5030.210505. A special...