CVE-2024-39789

Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration...

CVE-2024-39789

CVE-2024-39789 affects Wavlink AC3000 (M33A8.V5030.210505) via nas.cgi set_ftp_cfg() with multiple external config control flaws. The TALOS write-up details vulnerability in the FTP config flow (ftp_name, ftp_port, ftp_max_sessions, ftp_adddir, ftp_anonymous, ftp_read/write/download/upload) store...

Wavlink AC3000 nas.cgi set_ftp_cfg() Configuration Control Vulnerabilities

Talos Vulnerability Report TALOS-2024-2056 Wavlink AC3000 nas.cgi setftpcfg Configuration Control Vulnerabilities January 14, 2025 CVE Number CVE-2024-39788,CVE-2024-39790,CVE-2024-39789 SUMMARY Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavli...