CVE-2024-10429

all versions

A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the fu

7.2HIGH

CVE-2024-10428

all versions

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affe

7.2HIGH

CVE-2024-10194

<= 20221028

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected i

8.8HIGH

CVE-2024-10193

<= 20221028

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects

4.7MEDIUM

CVE-2022-35538

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_de

9.8CRITICAL

CVE-2022-35537

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads

9.8CRITICAL

CVE-2022-35536

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads

9.8CRITICAL

CVE-2022-35535

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command in

9.8CRITICAL

CVE-2022-35534

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which l

9.8CRITICAL

CVE-2022-35533

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to

9.8CRITICAL

CVE-2022-35526

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection

9.8CRITICAL

CVE-2022-35525

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command inje

9.8CRITICAL

CVE-2022-35524

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_Encryp

9.8CRITICAL

CVE-2022-35523

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which

9.8CRITICAL

CVE-2022-35522

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gatewa

9.8CRITICAL

CVE-2022-35521

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPo

9.8CRITICAL

CVE-2022-35520

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter

9.8CRITICAL

CVE-2022-35519

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command in

9.8CRITICAL

CVE-2022-35518

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to

9.8CRITICAL

CVE-2022-35517

all versions

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, E

8.8HIGH

CVE-2020-12127

all versions

An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 al

7.5HIGH

CVE-2020-12126

all versions

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attack

9.8CRITICAL

CVE-2020-12125

all versions

A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows a

9.8CRITICAL

CVE-2020-12124

all versions

A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allo

9.8CRITICAL

CVE-2020-12123

all versions

CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access rou

8.1HIGH

CVE-2020-10974

all versions

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in

7.5HIGH

CVE-2020-12266

all versions

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and s

7.5HIGH