📦

wl-wn535k3

Vendor: wavlink

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 5 Remote Access
Total CVEs 7 Total Indexed
Avg. EPSS 29.03% Exploit Prob.
Latest CVE CVE-2025-50757 Sep 02

Security Vulnerability Index

Page 1 / 1
6.5 CVSS
CVE-2025-50757
RCE

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

EPSS: 1.84%
6.5 CVSS
CVE-2025-50755
RCE

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

EPSS: 1.08%
8.0 CVSS
CVE-2022-2488
RCE

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used.

EPSS: 32.95%
8.0 CVSS
CVE-2022-2487
RCE

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has been disclosed to the public and may be used.

EPSS: 79.51%
8.0 CVSS
CVE-2022-2486
RCE

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used.

EPSS: 29.76%