CVE-2022-35517

EUVD-2022-38404 · Published Aug 10, 2022

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml.

Technologies

Wavlink Wn572Hp3Wavlink Wn530H4 FirmwareWavlink Wn530H4Wavlink Wn533A8 FirmwareWavlink Wn535G3Wavlink Wn533A8Wavlink Wn531P3 FirmwareWavlink Wn572Hp3 FirmwareWavlink Wn535G3 FirmwareWavlink Wn531P3

Weaknesses

NVD-CWE-Other

CVSS scores

v3.18.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_router_meshshtml-command-injection-in-admcgi

Potentially impacted assets

See if this affects your attack surface