Wavlink

Wl-wn578w2 Firmware

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-10359

Exploit
  • EPSS 0.45%
  • Veröffentlicht 13.09.2025 13:15:32
  • Zuletzt bearbeitet 02.10.2025 20:12:03

A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The expl...

9.8

CVE-2025-10358

Exploit
  • EPSS 0.45%
  • Veröffentlicht 13.09.2025 08:02:06
  • Zuletzt bearbeitet 02.10.2025 20:12:32

A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated r...

8.8

CVE-2025-10325

Exploit
  • EPSS 0.38%
  • Veröffentlicht 12.09.2025 20:02:05
  • Zuletzt bearbeitet 02.10.2025 20:17:36

A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection. It is possible to launch the attack remo...

9.8

CVE-2025-10324

Exploit
  • EPSS 0.33%
  • Veröffentlicht 12.09.2025 19:32:05
  • Zuletzt bearbeitet 02.10.2025 19:45:13

A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.cgi. This manipulation of the argument pingFrmWANFilterEnabled/blockSynFloodEnabled/blockPortScanEnabled/remoteManagementEnabled ca...

9.8

CVE-2025-10323

Exploit
  • EPSS 0.33%
  • Veröffentlicht 12.09.2025 19:02:05
  • Zuletzt bearbeitet 02.10.2025 19:47:21

A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wizard_rep.shtml. The manipulation of the argument sel_EncrypTyp results in command injection. The attack may be performed from remot...

5.3

CVE-2025-10322

Exploit
  • EPSS 0.16%
  • Veröffentlicht 12.09.2025 18:02:05
  • Zuletzt bearbeitet 02.10.2025 19:54:11

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carrie...

5.3

CVE-2025-10321

Exploit
  • EPSS 0.05%
  • Veröffentlicht 12.09.2025 17:32:05
  • Zuletzt bearbeitet 02.10.2025 19:56:34

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Executing manipulation can lead to information disclosure. The attack can be executed remotely. The exploit has been published and may...