CVE-2022-35524
CRITICAL 9.8EPSS 2.3%
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.28% chance of exploitation in the next 30 days, 83rd percentile
- Published
- 2022-08-09
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_repsht…0★ · 2025-08-05