Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

63 records

Vendor: Wavlink Component: Wl-wn533a8 Firmware Clear all filters
TI-2024-22613 CVE-2024-34166 · GHSA-7p4j-prhq-8ffm

Command injection in Wavlink AC3000

Priority HIGH 65

An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.16221 Published 2025-01-14 No fix listed CWE-77
TI-2024-26315 CVE-2024-39363 · GHSA-7rgq-53c3-wvm6

Cross-site scripting in Wavlink AC3000

Priority HIGH 74

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.49047 Published 2025-01-14 No fix listed CWE-80
TI-2024-26679 CVE-2024-39761 · GHSA-7p64-5x2j-p5qx

Command injection in Wavlink AC3000

Priority MEDIUM 60

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08398 Published 2025-01-14 No fix listed CWE-77
TI-2024-26678 CVE-2024-39760 · GHSA-9f95-94rj-c9f5

Command injection in Wavlink AC3000

Priority HIGH 66

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.1785 Published 2025-01-14 No fix listed CWE-77
TI-2024-26677 CVE-2024-39759 · GHSA-p2ch-mj9p-73pg

Command injection in Wavlink AC3000

Priority MEDIUM 60

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08398 Published 2025-01-14 No fix listed CWE-77
TI-2024-24106 CVE-2024-36290 · GHSA-8f65-h57m-hqw8

Buffer overflow in Wavlink AC3000

Priority MEDIUM 52

A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0145 Published 2025-01-14 No fix listed CWE-120
TI-2024-26683 CVE-2024-39765 · GHSA-g72p-5f8c-rcj2

Command injection in Wavlink AC3000

Priority MEDIUM 50

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0536 Published 2025-01-14 No fix listed CWE-77
TI-2024-26682 CVE-2024-39764 · GHSA-39p7-78c9-m48f

Command injection in Wavlink AC3000

Priority MEDIUM 48

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.04275 Published 2025-01-14 No fix listed CWE-77
TI-2024-26681 CVE-2024-39763 · GHSA-3cww-g5m8-59q4

Command injection in Wavlink AC3000

Priority MEDIUM 49

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.04953 Published 2025-01-14 No fix listed CWE-77
TI-2024-26680 CVE-2024-39762 · GHSA-5f5r-cv84-3xjr

Command injection in Wavlink AC3000

Priority MEDIUM 50

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.06043 Published 2025-01-14 No fix listed CWE-77
TI-2024-26247 CVE-2024-39288 · GHSA-pp4g-pjj7-f6rj

Buffer overflow in Wavlink AC3000

Priority MEDIUM 54

A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.13848 Published 2025-01-14 No fix listed CWE-120
TI-2024-26688 CVE-2024-39770 · GHSA-cphf-r7wp-hq92

Buffer overflow in Wavlink AC3000

Priority MEDIUM 42

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01294 Published 2025-01-14 No fix listed CWE-120
TI-2024-26687 CVE-2024-39769 · GHSA-2998-9vr3-8cqh

Buffer overflow in Wavlink AC3000

Priority MEDIUM 41

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00902 Published 2025-01-14 No fix listed CWE-120
TI-2024-26686 CVE-2024-39768 · GHSA-wp3h-cvvj-q2gw

Buffer overflow in Wavlink AC3000

Priority MEDIUM 42

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01294 Published 2025-01-14 No fix listed CWE-120
TI-2024-26318 CVE-2024-39367 · GHSA-453m-fcx3-j43g

Command injection in Wavlink AC3000

Priority MEDIUM 52

An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.08481 Published 2025-01-14 No fix listed CWE-77
TI-2024-26674 CVE-2024-39756 · GHSA-jhvv-hwq8-7rx2

Buffer overflow in Wavlink AC3000

Priority MEDIUM 43

A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01927 Published 2025-01-14 No fix listed CWE-120
TI-2024-24710 CVE-2024-37184 · GHSA-65gf-8mmg-g56g

Buffer overflow in Wavlink AC3000

Priority MEDIUM 42

A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0135 Published 2025-01-14 No fix listed CWE-120
TI-2024-26253 CVE-2024-39294 · GHSA-px43-x9c5-2gjv

Buffer overflow in Wavlink AC3000

Priority MEDIUM 42

A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01582 Published 2025-01-14 No fix listed CWE-120
TI-2024-26311 CVE-2024-39358 · GHSA-gx3h-wj7q-54q9

Buffer overflow in Wavlink AC3000

Priority MEDIUM 43

A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01927 Published 2025-01-14 No fix listed CWE-120
TI-2024-14478 CVE-2024-21797 · GHSA-hpf7-2hg3-3g3h

Injection in Wavlink AC3000

Priority MEDIUM 61

A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.21323 Published 2025-01-14 No fix listed CWE-74
TI-2024-24868 CVE-2024-37357 · GHSA-gqrr-9m6w-6qhc

Buffer overflow in Wavlink AC3000

Priority MEDIUM 54

A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.09964 Published 2025-01-14 No fix listed CWE-120
TI-2024-26692 CVE-2024-39774 · GHSA-g23p-hhrc-qr97

Buffer overflow in Wavlink AC3000

Priority MEDIUM 44

A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01346 Published 2025-01-14 No fix listed CWE-120
TI-2024-26320 CVE-2024-39370 · GHSA-2jpw-fpqf-qc7g

Buffer overflow in Wavlink AC3000

Priority MEDIUM 46

An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02243 Published 2025-01-14 No fix listed CWE-120
TI-2024-24712 CVE-2024-37186 · GHSA-9rjp-q43g-3644

Command injection in Wavlink AC3000

Priority MEDIUM 62

An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.23429 Published 2025-01-14 No fix listed CWE-77
TI-2024-26701 CVE-2024-39783 · GHSA-3g8p-fgh4-3vvq

Command injection in Wavlink AC3000

Priority MEDIUM 49

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.04597 Published 2025-01-14 No fix listed CWE-77
Load more