WAVLINK WN579X3 - Remote Command Execution

Remote Command Execution vulnerability in WAVLINK WN579X3 routers via pingIp parameter in /cgi-bin/adm.cgi. id: CVE-2023-3380 info: name: WAVLINK WN579X3 - Remote Command Execution author: pussycat0x severity: critical description: | Remote Command Execution vulnerability in WAVLINK WN579X3 route...

CVE-2023-3380

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-3380

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit h...

Design/Logic Flaw

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-3380

WAVLINK WN579X3 routers are affected by a Remote Command Execution vulnerability in the Ping Test component (/cgi-bin/adm.cgi) via the pingIp parameter. The issue allows unauthenticated remote command injection and can enable an attacker to compromise the router and potentially intercept traffic....

CVE-2023-3380 Wavlink WN579X3 Ping Test adm.cgi injection

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit h...

WAVLINK WN579X3 注入漏洞

WAVLINK WN579X3 is a wireless access point from China RuiYin Technology WAVLINK. An injection vulnerability exists in Wavlink WN579X3 versions prior to 20230615, which stems from a problem with the file /cgi-bin/adm.cgi, where incorrect manipulation of the parameter pingIp can lead to injection...

PT-2023-24503 · Wavlink · Wavlink Wn579X3

Name of the Vulnerable Software and Affected Versions: Wavlink WN579X3 versions up to 20230615 Description: A critical issue has been discovered, affecting an unknown function of the /cgi-bin/adm.cgi file in the Ping Test component. The manipulation of the pingIp argument leads to injection. This...

CVE-2023-3380: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit h...

CVE-2020-13117

Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request...

Cross site request forgery (csrf)

Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request...

CVE-2020-10974: Missing Authentication for Critical Function

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3,...

PT-2020-12459

Name of the Vulnerable Software and Affected Versions Wavlink WN575A3 Wavlink WN579G3 Wavlink WN531A6 Wavlink WN535G3 Wavlink WN530H4 Wavlink WN57X93 Wavlink WN572HG3 Wavlink WN575A4 Wavlink WN578A2 Wavlink WN579X3 Jetstream AC3000/ERAC3000 Description An issue was discovered affecting a backup...

PT-2020-12456

Name of the Vulnerable Software and Affected Versions Wavlink WN530HG4 Wavlink WN575A3 Wavlink WN579G3 Wavlink WN531G3 Wavlink WN533A8 Wavlink WN531A6 Wavlink WN551K1 Wavlink WN535G3 Wavlink WN530H4 Wavlink WN57X93 WN572HG3 Wavlink WN578A2 Wavlink WN579G3 Wavlink WN579X3 Jetstream AC3000/ERAC3000...

CVE-2020-12266: Missing Authentication for Critical Function

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed...

PT-2020-13084

Name of the Vulnerable Software and Affected Versions Wavlink WN530HG4 Wavlink WN575A3 Wavlink WN579G3 Wavlink WN531G3 Wavlink WN533A8 Wavlink WN531A6 Wavlink WN551K1 Wavlink WN535G3 Wavlink WN530H4 Wavlink WN57X93 WN572HG3 Wavlink WN578A2 Wavlink WN579G3 Wavlink WN579X3 Jetstream AC3000/ERAC3000...