2 matches found
CVE-2024-39760
Multiple OS command injection vulnerabilities exist in the login.cgi setsysinit functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comman...
9.8CVSS6AI score0.17378EPSS
SaveExploits1References2
CVE-2024-39760: Improper Neutralization of Special Elements used in a Command
Multiple OS command injection vulnerabilities exist in the login.cgi setsysinit functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comman...
10CVSS6.4AI score0.17378EPSS
SaveExploits1References1
20