Wavlink AC3000 sch_reboot() Arbitrary Command Execution

The vulnerability of the schreboot function in the adm.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to the lack of measures taken to manage data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

PT-2025-2564

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple OS command injection vulnerabilities exist in the adm.cgi sch reboot functionality. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an...

PT-2025-2562

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple OS command injection vulnerabilities exist in the sch reboot functionality of adm.cgi, allowing for arbitrary code execution through a specially crafted HTTP request. An attacker...

PT-2025-2563

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple OS command injection vulnerabilities exist in the adm.cgi sch reboot functionality. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an...