wavlink Vulnerability Advisory Catalog

Total 203 security vulnerabilities recorded for wavlink software and firmware.

← Back to All Vendors
CVE-2020-12126 CRITICAL
Component: wn530h4_firmware

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router se...

📅 2020-10-02
CVSS 9.8 Dossier →
CVE-2020-12125 CRITICAL
Component: wn530h4_firmware

A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execut...

📅 2020-10-02
CVSS 9.8 Dossier →
CVE-2020-12124 CRITICAL
Component: wn530h4_firmware

A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to ex...

📅 2020-10-02
CVSS 9.8 Dossier →
Component: wn530h4_firmware

CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, becau...

📅 2020-10-02
CVSS 8.1 Dossier →
CVE-2020-15490 CRITICAL
Component: wl-wn530hg4_firmware

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to ...

📅 2020-07-01
CVSS 9.8 Dossier →
CVE-2020-15489 CRITICAL
Component: wl-wn530hg4_firmware

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI script...

📅 2020-07-01
CVSS 9.8 Dossier →
Component: wl-wn575a3_firmware

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, includin...

📅 2020-05-07
CVSS 7.5 Dossier →
Component: wn530hg4_firmware

An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a cra...

📅 2020-05-07
CVSS 7.5 Dossier →
Component: wn530hg4_firmware

An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentica...

📅 2020-05-07
CVSS 7.5 Dossier →
Component: wl-wn575a3_firmware

An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supp...

📅 2020-05-07
CVSS 8.8 Dossier →
Component: wl-wn579g3_firmware

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system informat...

📅 2020-04-27
CVSS 7.5 Dossier →
Page 9 of 9 (203 Total Records)