İçeriğe atla
Noroxi

Wavlink kayıtları

wavlink üreticisine ait 204 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
52
Düzeltme kaydı olan
%1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

204 kayıt
  • CVE-2022-2487
    63Bu hafta

    WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    wavlink · wl-wn535k2 firmware20 Tem 2022

  • CVE-2020-12124
    61Bu hafta

    A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an atta

    KritikCVSS 9,8Kavram kanıtıEPSS %75

    wavlink · wn530h4 firmware2 Eki 2020

  • CVE-2020-13117
    60Bu hafta

    Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key paramete

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    wavlink · wn575a4 firmware9 Şub 2021

  • CVE-2022-2488
    49Planlayın

    WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    wavlink · wl-wn535k2 firmware20 Tem 2022

  • CVE-2022-2486
    48Planlayın

    WAVLINK WN535K2/WN535K3 os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    wavlink · wl-wn535k2 firmware20 Tem 2022

  • CVE-2024-39280
    46Planlayın

    An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,1İstismar yokEPSS %34

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39760
    44Planlayın

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,8İstismar yokEPSS %17

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-34166
    44Planlayın

    An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,8İstismar yokEPSS %16

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-36258
    43Planlayın

    A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210

    KritikCVSS 9,8İstismar yokEPSS %12

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-38666
    42Planlayın

    An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505

    KritikCVSS 9,1İstismar yokEPSS %19

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39761
    41Planlayın

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,8İstismar yokEPSS %8

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39759
    41Planlayın

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,8İstismar yokEPSS %8

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2023-3380
    40Planlayın

    Wavlink WN579X3 Ping Test adm.cgi injection

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    wavlink · wn579x3 firmware23 Haz 2023

  • CVE-2020-15490
    40Planlayın

    An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices.

    KritikCVSS 9,8İstismar yokEPSS %4

    wavlink · wl-wn530hg4 firmware1 Tem 2020

  • CVE-2020-15489
    40Planlayın

    An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices.

    KritikCVSS 9,8İstismar yokEPSS %4

    wavlink · wl-wn530hg4 firmware1 Tem 2020

  • CVE-2020-12125
    40Planlayın

    A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker

    KritikCVSS 9,8İstismar yokEPSS %4

    wavlink · wn530h4 firmware2 Eki 2020

  • CVE-2022-23900
    40Planlayın

    A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve una

    KritikCVSS 9,8İstismar yokEPSS %4

    wavlink · wl-wn531p3 firmware7 Nis 2022

  • CVE-2022-34045
    40Planlayın

    Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    wavlink · wl-wn530hg4 firmware20 Tem 2022

  • CVE-2022-34592
    40Planlayın

    Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw.

    KritikCVSS 9,8İstismar yokEPSS %3

    wavlink · wl-wn575a3 firmware7 Tem 2022

  • CVE-2022-31311
    40Planlayın

    An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request.

    KritikCVSS 9,8İstismar yokEPSS %3

    wavlink · aerial x 1200m firmware14 Haz 2022

  • CVE-2022-37149
    40Planlayın

    WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi.

    KritikCVSS 9,8İstismar yokEPSS %3

    wavlink · wl-wn575a3 firmware30 Ağu 2022

  • CVE-2025-44868
    40Planlayın

    Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp p

    KritikCVSS 9,8İstismar yokEPSS %3

    wavlink · wl-wn530h4 firmware2 May 2025

  • CVE-2022-34577
    40Planlayın

    A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.

    KritikCVSS 9,8İstismar yokEPSS %2

    wavlink · wn535g3 firmware25 Tem 2022

  • CVE-2022-35525
    40Planlayın

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in p

    KritikCVSS 9,8İstismar yokEPSS %2

    wavlink · wn572hp3 firmware10 Ağu 2022

  • CVE-2022-35520
    40Planlayın

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which does

    KritikCVSS 9,8İstismar yokEPSS %2

    wavlink · wn572hp3 firmware10 Ağu 2022