wavlink Vulnerability Advisory Catalog

Total 203 security vulnerabilities recorded for wavlink software and firmware.

← Back to All Vendors
Component: wn531g3_firmware

The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. ...

📅 2022-09-13
CVSS 8.8 Dossier →
Component: wn531g3_firmware

Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because th...

📅 2022-09-13
CVSS 7.5 Dossier →
CVE-2022-37149 CRITICAL
Component: wl-wn575a3_firmware

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerabilit...

📅 2022-08-30
CVSS 9.8 Dossier →
CVE-2022-35538 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_dele...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35537 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35536 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injectio...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35535 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wif...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35534 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command inje...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35533 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35526 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtm...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35525 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledon...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35524 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, w...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35523 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command inj...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35522 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwa...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35521 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingF...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35520 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35519 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli...

📅 2022-08-10
CVSS 9.8 Dossier →
CVE-2022-35518 CRITICAL
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection i...

📅 2022-08-10
CVSS 9.8 Dossier →
Component: wn572hp3_firmware

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, ...

📅 2022-08-10
CVSS 8.8 Dossier →
CVE-2022-34577 CRITICAL
Component: wn535g3_firmware

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request....

📅 2022-07-25
CVSS 9.8 Dossier →
Component: wn535g3_firmware

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST...

📅 2022-07-25
CVSS 7.5 Dossier →
Component: wifi-repeater_firmware

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via acce...

📅 2022-07-25
CVSS 5.7 Dossier →
Component: wifi-repeater_firmware

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via acce...

📅 2022-07-25
CVSS 5.7 Dossier →
Component: wifi-repeater_firmware

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessi...

📅 2022-07-25
CVSS 6.3 Dossier →
Page 7 of 9 (203 Total Records)