CVE-2024-39788

creationtimestamp| type| source ---|---|--- 2025-01-14 15:18:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkdkhsvn2f 2025-01-14 15:50:02+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827499145442484 2025-01-14 17:20:31+00:00| seen|...

CVE-2024-39788

Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration...

Wavlink AC3000 nas.cgi set_ftp_cfg() Configuration Control Vulnerabilities

Talos Vulnerability Report TALOS-2024-2056 Wavlink AC3000 nas.cgi setftpcfg Configuration Control Vulnerabilities January 14, 2025 CVE Number CVE-2024-39788,CVE-2024-39790,CVE-2024-39789 SUMMARY Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavli...