Wavlink

Wl-wn535k3 Firmware

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-50755

Exploit
  • EPSS 14.35%
  • Veröffentlicht 02.09.2025 00:00:00
  • Zuletzt bearbeitet 04.09.2025 17:47:08

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

6.5

CVE-2025-50757

Exploit
  • EPSS 14.35%
  • Veröffentlicht 02.09.2025 00:00:00
  • Zuletzt bearbeitet 04.09.2025 17:47:15

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8

CVE-2022-2486

Exploit
  • EPSS 94.07%
  • Veröffentlicht 20.07.2022 12:15:08
  • Zuletzt bearbeitet 21.11.2024 07:01:05

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has ...

9.8

CVE-2022-2487

Exploit
  • EPSS 93.45%
  • Veröffentlicht 20.07.2022 12:15:08
  • Zuletzt bearbeitet 21.11.2024 07:01:05

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploi...

9.8

CVE-2022-2488

Exploit
  • EPSS 93.2%
  • Veröffentlicht 20.07.2022 12:15:08
  • Zuletzt bearbeitet 14.01.2025 16:15:26

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit ha...