Wavlink

Wl-wn578w2 Firmware

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.4

CVE-2026-4544

Exploit
  • EPSS 0.04%
  • Veröffentlicht 22.03.2026 09:58:12
  • Zuletzt bearbeitet 23.03.2026 14:31:37

A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cros...

6.3

CVE-2026-4543

Exploit
  • EPSS 0.3%
  • Veröffentlicht 22.03.2026 09:23:28
  • Zuletzt bearbeitet 23.03.2026 14:31:37

A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in comman...

9.8

CVE-2026-4164

Exploit
  • EPSS 0.24%
  • Veröffentlicht 15.03.2026 03:02:10
  • Zuletzt bearbeitet 16.03.2026 14:53:07

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function Delete_Mac_list/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection. It is poss...

9.8

CVE-2025-10359

Exploit
  • EPSS 0.28%
  • Veröffentlicht 13.09.2025 13:15:32
  • Zuletzt bearbeitet 02.10.2025 20:12:03

A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The expl...

9.8

CVE-2025-10358

Exploit
  • EPSS 0.28%
  • Veröffentlicht 13.09.2025 08:02:06
  • Zuletzt bearbeitet 02.10.2025 20:12:32

A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated r...

8.8

CVE-2025-10325

Exploit
  • EPSS 0.26%
  • Veröffentlicht 12.09.2025 20:02:05
  • Zuletzt bearbeitet 02.10.2025 20:17:36

A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection. It is possible to launch the attack remo...

9.8

CVE-2025-10324

Exploit
  • EPSS 0.25%
  • Veröffentlicht 12.09.2025 19:32:05
  • Zuletzt bearbeitet 02.10.2025 19:45:13

A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.cgi. This manipulation of the argument pingFrmWANFilterEnabled/blockSynFloodEnabled/blockPortScanEnabled/remoteManagementEnabled ca...

9.8

CVE-2025-10323

Exploit
  • EPSS 0.25%
  • Veröffentlicht 12.09.2025 19:02:05
  • Zuletzt bearbeitet 02.10.2025 19:47:21

A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wizard_rep.shtml. The manipulation of the argument sel_EncrypTyp results in command injection. The attack may be performed from remot...

5.3

CVE-2025-10322

Exploit
  • EPSS 0.15%
  • Veröffentlicht 12.09.2025 18:02:05
  • Zuletzt bearbeitet 02.10.2025 19:54:11

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carrie...

5.3

CVE-2025-10321

Exploit
  • EPSS 0.05%
  • Veröffentlicht 12.09.2025 17:32:05
  • Zuletzt bearbeitet 02.10.2025 19:56:34

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Executing manipulation can lead to information disclosure. The attack can be executed remotely. The exploit has been published and may...