CVE-2024-39761

creationtimestamp| type| source ---|---|--- 2025-01-14 15:11:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1487 2025-01-14 15:17:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkbwjihn2n...

CVE-2024-39761

Multiple OS command injection vulnerabilities exist in the login.cgi setsysinit functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comman...

Wavlink AC3000 login.cgi set_sys_init() command injection vulnerabilities

Talos Vulnerability Report TALOS-2024-2018 Wavlink AC3000 login.cgi setsysinit command injection vulnerabilities January 14, 2025 CVE Number CVE-2024-39759,CVE-2024-39761,CVE-2024-39760 SUMMARY Multiple OS command injection vulnerabilities exist in the login.cgi setsysinit functionality of Wavlin...