26 matches found
CVE-2024-48705
Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...
CVE-2020-12124
Anatomy of an IoT Exploit, from Hands-On to RCE originally at https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce by David E. Baker, published on June 1, 2023 Foreword This study concerns the firmware of the Wavlink Wireless-AC1200 Gigabit router as of...
EUVD-2021-31105
Malicious code in bioql PyPI...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
CVE-2024-48705
The Wavlink AC1200 (Model: WL-WN532A3) router is vulnerable to post-authentication command injection in firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 . The flaw exists in the set_sys_adm function of the adm.cgi binary, where the newpass field is improperly sanitized. While the syste...
PT-2025-35572
Name of the Vulnerable Software and Affected Versions: Wavlink AC1200 versions M32A3 V1410 230602 and M32A3 V1410 240222 Description: The Wavlink AC1200 is susceptible to a post-authentication command injection when resetting the password. The issue resides within the adm.cgi binary, specifically...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
CVE-2024-48705: Improper Neutralization of Special Elements used in a Command
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
多款WAVLINK产品安全漏洞
WAVLINK AC1200 and others are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router.WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 AC1200 version has a securit...
WAVLINK AC1200 has an unspecified vulnerability
WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...
CVE-2021-44260
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
CVE-2021-44260
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
CVE-2021-44259
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...
CVE-2021-44259
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...
CVE-2021-44260
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
Authentication flaw
A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...
Design/Logic Flaw
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...
CVE-2021-44259
CVE-2021-44259 concerns WAVLINK AC1200 (WAVLINK-A42W-1.27.6-20180418): unauthenticated access to the wx.html page allows an unauthenticated attacker to access the page and connect to the device as a friend of the owner. The vulnerability is triggered through direct access to this page without cre...
CVE-2021-44259
A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...