Wavlink

Records249All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical135CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

Wavlink records in CISA KEV

No Wavlink vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wl-wn533a8 Firmware 63 records HIGH Wl-nu516u1 Firmware 28 records HIGH Wn530h4 Firmware 27 records HIGH Wn535g3 Firmware 23 records HIGH Wn533a8 Firmware 20 records HIGH Wn531p3 Firmware 17 records HIGH Wn572hp3 Firmware 16 records HIGH Wl-wn578w2 Firmware 9 records HIGH

Records

63 records in Wl-wn533a8 Firmware · all components

TI-2024-26315 CVE-2024-39363 · GHSA-7rgq-53c3-wvm6

Cross-site scripting in Wavlink AC3000

HIGH 74

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.49047 Published 2025-01-14 No fix listed CWE-80

TI-2024-26239 CVE-2024-39280 · GHSA-33pw-8v2f-85mj

An external config control vulnerability exists in the nas.cgi set_smb_cfg()…

HIGH 67

An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.34992 Published 2025-01-14 No fix listed CWE-15

TI-2024-26678 CVE-2024-39760 · GHSA-9f95-94rj-c9f5

Command injection in Wavlink AC3000

HIGH 66

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.1785 Published 2025-01-14 No fix listed CWE-77

TI-2024-22613 CVE-2024-34166 · GHSA-7p4j-prhq-8ffm

Command injection in Wavlink AC3000

HIGH 65

An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.16221 Published 2025-01-14 No fix listed CWE-77

TI-2024-24077 CVE-2024-36258 · GHSA-6r9m-h6rv-42cg

Stack-based buffer overflow in Wavlink AC3000

MEDIUM 63

A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.12792 Published 2025-01-14 No fix listed CWE-121

TI-2024-24712 CVE-2024-37186 · GHSA-9rjp-q43g-3644

Command injection in Wavlink AC3000

MEDIUM 62

An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.23429 Published 2025-01-14 No fix listed CWE-77

TI-2024-24111 CVE-2024-36295 · GHSA-94wj-p6vq-75pv

Injection in Wavlink AC3000

MEDIUM 61

A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.21323 Published 2025-01-14 No fix listed CWE-74

TI-2024-14478 CVE-2024-21797 · GHSA-hpf7-2hg3-3g3h

Injection in Wavlink AC3000

MEDIUM 61

A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.21323 Published 2025-01-14 No fix listed CWE-74

TI-2024-26679 CVE-2024-39761 · GHSA-7p64-5x2j-p5qx

Command injection in Wavlink AC3000

MEDIUM 60

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08398 Published 2025-01-14 No fix listed CWE-77

TI-2024-26677 CVE-2024-39759 · GHSA-p2ch-mj9p-73pg

Command injection in Wavlink AC3000

MEDIUM 60

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08398 Published 2025-01-14 No fix listed CWE-77

TI-2024-25901 CVE-2024-38666 · GHSA-2jw2-w8hc-jqch

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup()…

MEDIUM 60

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.1939 Published 2025-01-14 No fix listed CWE-15

TI-2024-26313 CVE-2024-39360 · GHSA-jfmv-87hc-q689

Command injection in Wavlink AC3000

MEDIUM 55

An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.12037 Published 2025-01-14 No fix listed CWE-77

TI-2024-26247 CVE-2024-39288 · GHSA-pp4g-pjj7-f6rj

Buffer overflow in Wavlink AC3000

MEDIUM 54

A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.13848 Published 2025-01-14 No fix listed CWE-120

TI-2024-24868 CVE-2024-37357 · GHSA-gqrr-9m6w-6qhc

Buffer overflow in Wavlink AC3000

MEDIUM 54

A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.09964 Published 2025-01-14 No fix listed CWE-120

TI-2024-22846 CVE-2024-34544 · GHSA-53rm-p3f5-vx5c

Injection in Wavlink AC3000

MEDIUM 53

A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.08734 Published 2025-01-14 No fix listed CWE-74

TI-2024-26672 CVE-2024-39754 · GHSA-9ch8-4327-g6cw

A static login vulnerability exists in the wctrls functionality of Wavlink AC3000…

MEDIUM 52

A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01342 Published 2025-01-14 No fix listed CWE-912

TI-2024-26538 CVE-2024-39608 · GHSA-hhjp-322f-hh5x

Missing authentication in Wavlink AC3000

MEDIUM 52

A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01462 Published 2025-01-14 No fix listed CWE-306

TI-2024-26318 CVE-2024-39367 · GHSA-453m-fcx3-j43g

Command injection in Wavlink AC3000

MEDIUM 52

An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.08481 Published 2025-01-14 No fix listed CWE-77

TI-2024-24106 CVE-2024-36290 · GHSA-8f65-h57m-hqw8

Buffer overflow in Wavlink AC3000

MEDIUM 52

A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0145 Published 2025-01-14 No fix listed CWE-120

TI-2024-26703 CVE-2024-39785 · GHSA-6gj7-68vj-fvp7

Injection in Wavlink AC3000

MEDIUM 51

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.06369 Published 2025-01-14 No fix listed CWE-74

TI-2024-26702 CVE-2024-39784 · GHSA-hfjp-2wj6-97ww

Injection in Wavlink AC3000

MEDIUM 51

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.06369 Published 2025-01-14 No fix listed CWE-74

TI-2024-26683 CVE-2024-39765 · GHSA-g72p-5f8c-rcj2

Command injection in Wavlink AC3000

MEDIUM 50

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0536 Published 2025-01-14 No fix listed CWE-77

TI-2024-26680 CVE-2024-39762 · GHSA-5f5r-cv84-3xjr

Command injection in Wavlink AC3000

MEDIUM 50

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.06043 Published 2025-01-14 No fix listed CWE-77

TI-2024-26701 CVE-2024-39783 · GHSA-3g8p-fgh4-3vvq

Command injection in Wavlink AC3000

MEDIUM 49

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.04597 Published 2025-01-14 No fix listed CWE-77

TI-2024-26699 CVE-2024-39781 · GHSA-5qf3-cvj3-r534

Command injection in Wavlink AC3000

MEDIUM 49

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.04597 Published 2025-01-14 No fix listed CWE-77

Open these records in search →