Wavlink AC3000 adm.cgi sch_reboot() OS command injection vulnerabilities

🗓️ 14 Jan 2025 00:00:00Reported by Talos IntelligenceType

talos

talos🔗 www.talosintelligence.com👁 19 Views

Multiple OS command injection vulnerabilities in Wavlink AC3000's sch_reboot() allow code execution.

Reporter	Title	Published	Views	Family All 32
BDU FSTEC	The vulnerability of the sch_reboot() function in the adm.cgi script of the Wavlink AC3000 (WL-WN533A8) router’s microprogramming system allows a hacker to execute arbitrary commands.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sch_reboot() function in the adm.cgi script of the Wavlink AC3000 (WL-WN533A8) router’s microprogramming system allows a hacker to execute arbitrary commands.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sch_reboot() function in the adm.cgi script of the Wavlink AC3000 (WL-WN533A8) router’s microprogramming system allows a hacker to execute arbitrary commands.	5 Mar 202500:00	–	bdu_fstec
Circl	CVE-2024-39781	14 Jan 202515:18	–	circl
Circl	CVE-2024-39782	14 Jan 202515:18	–	circl
Circl	CVE-2024-39783	14 Jan 202515:18	–	circl
CNNVD	WAVLINK AC3000 命令注入漏洞	14 Jan 202500:00	–	cnnvd
CNNVD	WAVLINK AC3000 命令注入漏洞	14 Jan 202500:00	–	cnnvd
CNNVD	WAVLINK AC3000 命令注入漏洞	14 Jan 202500:00	–	cnnvd
CNVD	WAVLINK AC3000 adm.cgi restart_week parameter command injection vulnerability in sch_reboot function	17 Jan 202500:00	–	cnvd

14 Jan 2025 00:00Current

9.8High risk

Vulners AI Score9.8

CVSS 3.17.2 - 9.1

EPSS0.00599

SSVC

os command injection wavlink ac3000 arbitrary code execution confirmed vulnerable versions cve numbers.