4 matches found
CVE-2024-38896
WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...
5.3CVSS5.7AI score0.01172EPSS
SaveExploits1References1
CVE-2024-38896
WAVLINK WN551K1 found a command injection vulnerability through the starthour parameter of /cgi-bin/nightled.cgi...
5.3CVSS0.01172EPSS
SaveExploits1References1
CVE-2024-38896
The WAVLINK WN551K1 wireless router is vulnerable to a command injection vulnerability due to improper neutralization of special elements in the start_hour parameter of the /cgi-bin/nightled.cgi API endpoint. An attacker can exploit this flaw to execute arbitrary commands on the device. While spe...
5.3CVSS7.5AI score0.01172EPSS
SaveExploits1References1Affected Software1
20