[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-35525":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":34,"references":45,"score":47,"epss_score":48,"epss_percentile":49,"is_kev":50,"cisa_kev_date_added":51,"cisa_kev_due_date":51,"cisa_ssvc":52,"attack_mappings":58,"exploits":65},312680,"CVE-2022-35525","EUVD-2022-38412","WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page \u002Fledonoff.shtml.","2022-08-10T20:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",9.8,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",true,[22],"NVD-CWE-Other",[24,25,26,27,28,29,30,31,32,33],"cpe:2.3:h:wavlink:wn530h4:-:*:*:*:*:*:*:*","cpe:2.3:h:wavlink:wn535g3:-:*:*:*:*:*:*:*","cpe:2.3:o:wavlink:wn530h4_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:wavlink:wn531p3:-:*:*:*:*:*:*:*","cpe:2.3:o:wavlink:wn533a8_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:wavlink:wn572hp3_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:wavlink:wn572hp3:-:*:*:*:*:*:*:*","cpe:2.3:h:wavlink:wn533a8:-:*:*:*:*:*:*:*","cpe:2.3:o:wavlink:wn535g3_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:wavlink:wn531p3_firmware:-:*:*:*:*:*:*:*",[35,36,37,38,39,40,41,42,43,44],"Wavlink Wn572Hp3","Wavlink Wn530H4 Firmware","Wavlink Wn530H4","Wavlink Wn533A8 Firmware","Wavlink Wn535G3","Wavlink Wn533A8","Wavlink Wn531P3 Firmware","Wavlink Wn572Hp3 Firmware","Wavlink Wn535G3 Firmware","Wavlink Wn531P3",[46],"https:\u002F\u002Fgithub.com\u002FTyeYeah\u002Fothercveinfo\u002Fblob\u002Fmain\u002Fwavlink\u002FREADME.md#wavlink-router-ac1200-page-ledonoffshtml-command-injection-in-admcgi",0.84,0.02378,0.83779,false,null,{"timestamp":51,"automatable":53,"tech_impact":54,"exploitation":55,"cisa_decision":56,"cisa_remediation_timeline":57},"no","partial","none",{},"FSU",[59],{"name":60,"source":61,"tactics":62,"technique_id":64},"Exploit Public-Facing Application","attack_vector",[63],"initial-access","T1190",[66],{"link":46}]