Command injection

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-37149

The CVE-2022-37149 issue affects WAVLINK WL-WN575A3 (RPT75A3.V4300.201217). A command-injection vulnerability exists in the adm.cgi endpoint, allowing an attacker to execute arbitrary commands via the username parameter. Root cause is improper handling of user-supplied input in adm.cgi. Impact, p...

CVE-2022-34592

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

Command injection

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-34592

The CVE-2022-34592 issue affects Wavlink WL-WN575A3 (RPT75A3.V4300.201217) with a vulnerability in the obtw function that allows command execution via a crafted POST request. The root cause is a command-injection flaw in obtw, enabling attackers to run arbitrary commands on the device. CVSS data ...