8 matches found
CVE-2026-2530
A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to th...
EUVD-2022-41141
Malicious code in bioql PyPI...
CVE-2025-10958
The CVE-2025-10958 issue affects Wavlink NU516U1 M16U1_V240425, specifically the AddMac Page’s /cgi-bin/wireless.cgi, function sub_403010. The vulnerability stems from manipulating the macAddr argument, leading to command injection. Remote exploitation is possible, and an exploit has been publish...
PT-2025-39431
Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 M16U1 V240425 Description A flaw exists in the function sub 403010 of the file /cgi-bin/wireless.cgi within the AddMac Page component. Manipulation of the macAddr argument can lead to command injection. Remote exploitation is...
CVE-2022-38563
Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the MACAddr parameter...
CVE-2022-38563
Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the MACAddr parameter...
多款WAVLINK产品安全漏洞
WAVLINK AC1200 is a dual-band high power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router.WAVLINK WN533A8 is a wireless router.WAVLINK WN533A8 is a wireless router with a...
PT-2022-22893 · Wavlink · Wavlink Wn533A8 +4
Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to the lack of filtering on the macAddr parameter in the wireless.cgi file, which leads to command injection in the /wifi...