Lucene search
K

Wavlink AC3000 touchlist_sync.cgi main() arbitrary code execution vulnerability

🗓️ 14 Jan 2025 00:00:00Reported by Talos IntelligenceType 
talos
 talos
🔗 www.talosintelligence.com👁 13 Views

Arbitrary code execution vulnerability in Wavlink AC3000 touchlist_sync.cgi via crafted HTTP requests.

Related
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-2488
20 Jul 202200:00
attackerkb
Circl
CVE-2022-2488
20 Jul 202216:20
circl
CNNVD
WAVLINK WN535K2 和 WN535K3 操作系统命令注入漏洞
20 Jul 202200:00
cnnvd
Check Point Advisories
Wavlink Routers Command Injection (CVE-2022-2486; CVE-2022-2488)
6 Nov 202200:00
checkpoint_advisories
CVE
CVE-2022-2488
20 Jul 202211:35
cve
Cvelist
CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection
20 Jul 202211:35
cvelist
Nuclei
Wavlink WN535K2/WN535K3 - OS Command Injection
1 Jun 202605:38
nuclei
NVD
CVE-2022-2488
20 Jul 202212:15
nvd
Prion
Command injection
20 Jul 202212:15
prion
Positive Technologies
PT-2022-16952 · Wavlink · Wavlink Wn535G3 +1
20 Jul 202200:00
ptsecurity
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Jan 2025 00:00Current
8High risk
Vulners AI Score8
CVSS 3.18 - 9.8
EPSS0.9332
SSVC
13