wavlink Vulnerability Advisory Catalog

Total 203 security vulnerabilities recorded for wavlink software and firmware.

← Back to All Vendors
Component: wl-wn535k3_firmware

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerabi...

📅 2025-09-02
CVSS 6.5 Dossier →
Component: wl-wn535k3_firmware

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerabil...

📅 2025-09-02
CVSS 6.5 Dossier →
Component: wl-wn531p3_firmware

Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resett...

📅 2025-09-02
CVSS 6.5 Dossier →
CVE-2025-9149 MEDIUM
Component: wl-nu516u1_firmware

A vulnerability was determined in Wavlink WL-NU516U1 M16U1_V240425. This impacts the function sub_4032E4 of the file /cgi-bin/wireless.cgi. This manip...

📅 2025-08-19
CVSS 6.3 Dossier →
CVE-2025-50756 CRITICAL
Component: wn535k3_firmware

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter. This vulnerabil...

📅 2025-07-14
CVSS 9.8 Dossier →
CVE-2025-44882 CRITICAL
Component: wl-wn579a3_firmware

A command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via...

📅 2025-05-20
CVSS 9.8 Dossier →
CVE-2025-44880 CRITICAL
Component: wl-wn579a3_firmware

A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a cr...

📅 2025-05-20
CVSS 9.8 Dossier →
CVE-2025-44881 CRITICAL
Component: wl-wn579a3_firmware

A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a cr...

📅 2025-05-20
CVSS 9.8 Dossier →
CVE-2025-44868 CRITICAL
Component: wl-wn530h4_firmware

Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. ...

📅 2025-05-02
CVSS 9.8 Dossier →
Component: wl-wn575a3_firmware

Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controll...

📅 2025-02-11
CVSS 5.1 Dossier →
CVE-2024-39803 CRITICAL
Component: wl-wn533a8_firmware

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted H...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39802 CRITICAL
Component: wl-wn533a8_firmware

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted H...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39801 CRITICAL
Component: wl-wn533a8_firmware

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted H...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39800 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. ...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39799 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. ...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39798 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. ...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39795 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A speciall...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39794 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A speciall...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39793 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A speciall...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39790 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially cr...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39789 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially cr...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39788 CRITICAL
Component: wl-wn533a8_firmware

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially cr...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39787 CRITICAL
Component: wl-wn533a8_firmware

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HT...

📅 2025-01-14
CVSS 9.1 Dossier →
CVE-2024-39786 CRITICAL
Component: wl-wn533a8_firmware

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HT...

📅 2025-01-14
CVSS 9.1 Dossier →
Page 3 of 9 (203 Total Records)