Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-2486

WAVLINK WN535K2/WN535K3 os command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 8 High EPSS 30.2% KEV · Not listed
Vendors
Wavlink
Products
Wl-wn535k2 Wl-wn535k2 Firmware Wl-wn535k3 and 1 more
CVE-2022-2487

WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 8 High EPSS 79.3% KEV · Not listed
Vendors
Wavlink
Products
Wl-wn535k2 Wl-wn535k2 Firmware Wl-wn535k3 and 1 more
CVE-2022-2488

WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 8 High EPSS 33.4% KEV · Not listed
Vendors
Wavlink
Products
Wl-wn535k2 Wl-wn535k2 Firmware Wl-wn535k3 and 1 more