Back to feed
EUVD-2022-38424 · Published Aug 10, 2022
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.
Technologies
Wavlink Wn572Hp3Wavlink Wn530H4 FirmwareWavlink Wn530H4Wavlink Wn533A8 FirmwareWavlink Wn535G3Wavlink Wn533A8Wavlink Wn531P3 FirmwareWavlink Wn572Hp3 FirmwareWavlink Wn535G3 FirmwareWavlink Wn531P3
Weaknesses
NVD-CWE-Other
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
