Lucene search
K

7 matches found

CNVD
CNVD
added 2025/09/16 12:0 a.m.2 views

Wavlink WL-WN578W2 Authorization Issues Vulnerability

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An authorization issue vulnerability exists in Wavlink WL-WN578W2 version 221110, which stems from improper privilege management of the parameter newpass/confpass in the file /sysinit.html, which can be exploited by an attacker t...

6.9CVSS5.7AI score0.00204EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/14 6:29 p.m.3 views

CVE-2025-10322

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

6.9CVSS5.3AI score0.00204EPSS
Exploits1References1
NVD
NVD
added 2025/09/12 6:15 p.m.2 views

CVE-2025-10322

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

6.9CVSS0.00204EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/09/12 6:2 p.m.3 views

CVE-2025-10322 Wavlink WL-WN578W2 sysinit.html password recovery

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

6.9CVSS6.4AI score0.00204EPSS
Exploits1References4
CVE
CVE
added 2025/09/12 6:2 p.m.8 views

CVE-2025-10322

The CVE-2025-10322 entry concerns Wavlink WL-WN578W2 (firmware 221110). A flaw in /sysinit.html allows manipulation of the newpass/confpass parameter due to improper privilege handling, enabling weak password recovery. Exploitation is described as remote and publicly disclosed, with PoC activity ...

6.9CVSS5.5AI score0.00204EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/09/12 12:0 a.m.3 views

Wavlink WL-WN578W2 授权问题漏洞

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An authorization issue vulnerability exists in Wavlink WL-WN578W2 version 221110, which stems from improper privilege management of the parameter newpass/confpass in the file /sysinit.html, which can be exploited by an attacker t...

6.9CVSS7AI score0.00204EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/12 12:0 a.m.3 views

PT-2025-37341

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN578W2 version 221110 Description: A vulnerability exists in Wavlink WL-WN578W2 221110. The issue is related to weak password recovery due to the manipulation of the newpass/confpass arguments within an unknown function of the...

6.9CVSS5.1AI score0.00204EPSS
Exploits1References6
Rows per page
Query Builder