wavlink Vulnerability Advisory Catalog

Total 203 security vulnerabilities recorded for wavlink software and firmware.

← Back to All Vendors
Component: wifi-repeater_firmware

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page...

📅 2022-07-25
CVSS 5.7 Dossier →
Component: wifi-repeater_firmware

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arb...

📅 2022-07-25
CVSS 8.0 Dossier →
Component: wl-wn579x3_firmware

WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing...

📅 2022-07-25
CVSS 7.5 Dossier →
Component: wl-wn530hg4_firmware

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data....

📅 2022-07-20
CVSS 5.3 Dossier →
Component: wn533a8_firmware

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter....

📅 2022-07-20
CVSS 6.1 Dossier →
Component: wl-wn530hg4_firmware

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/s...

📅 2022-07-20
CVSS 7.5 Dossier →
Component: wn533a8_firmware

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sys...

📅 2022-07-20
CVSS 7.5 Dossier →
CVE-2022-34045 CRITICAL
Component: wl-wn530hg4_firmware

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/w...

📅 2022-07-20
CVSS 9.8 Dossier →
Component: wl-wn535k2_firmware

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/t...

📅 2022-07-20
CVSS 8.0 Dossier →
Component: wl-wn535k2_firmware

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin...

📅 2022-07-20
CVSS 8.0 Dossier →
Component: wl-wn535k2_firmware

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cg...

📅 2022-07-20
CVSS 8.0 Dossier →
CVE-2022-34592 CRITICAL
Component: wl-wn575a3_firmware

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows a...

📅 2022-07-07
CVSS 9.8 Dossier →
Component: wn579x3_firmware

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a ...

📅 2022-06-14
CVSS 7.5 Dossier →
Component: wn535g3_firmware

A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the...

📅 2022-06-14
CVSS 7.5 Dossier →
Component: wn535g3_firmware

A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of t...

📅 2022-06-14
CVSS 7.5 Dossier →
CVE-2022-31311 CRITICAL
Component: aerial_x_1200m_firmware

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request....

📅 2022-06-14
CVSS 9.8 Dossier →
Component: aerial_x_1200m_firmware

A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution...

📅 2022-06-14
CVSS 7.5 Dossier →
Component: aerial_x_1200m_firmware

A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution o...

📅 2022-06-14
CVSS 7.5 Dossier →
Component: wn535g3_firmware

WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi....

📅 2022-05-13
CVSS 6.1 Dossier →
CVE-2022-23900 CRITICAL
Component: wl-wn531p3_firmware

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized ...

📅 2022-04-07
CVSS 9.8 Dossier →
Component: wl-wn531g3_firmware

A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to acces...

📅 2022-03-17
CVSS 7.5 Dossier →
CVE-2021-44259 CRITICAL
Component: wl-wn531g3_firmware

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this...

📅 2022-03-17
CVSS 9.8 Dossier →
CVE-2020-13117 CRITICAL
Component: wn575a4_firmware

Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a log...

📅 2021-02-09
CVSS 9.8 Dossier →
Component: wn530h4_firmware

An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to ...

📅 2020-10-02
CVSS 7.5 Dossier →
Page 8 of 9 (203 Total Records)