2 matches found
CVE-2024-36295
A command execution vulnerability exists in the qos.cgi qossta functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
7.2CVSS6.1AI score0.20769EPSS
SaveExploits1References2
CVE-2024-36295: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A command execution vulnerability exists in the qos.cgi qossta functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
9.1CVSS6.1AI score0.20769EPSS
SaveExploits1References1
20