📦

wn531p3

Vendor: wavlink

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 16 Remote Access
Total CVEs 17 Total Indexed
Avg. EPSS 2.10% Exploit Prob.
Latest CVE CVE-2024-54747 Dec 06

Security Vulnerability Index

Page 1 / 2
9.8 CVSS
CVE-2024-54747

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

EPSS: 0.54%
9.8 CVSS
CVE-2022-35538
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to command injection in page /wifi_mesh.shtml.

EPSS: 2.19%
9.8 CVSS
CVE-2022-35537
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.

EPSS: 2.19%
9.8 CVSS
CVE-2022-35536
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml.

EPSS: 2.19%
9.8 CVSS
CVE-2022-35535
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.

EPSS: 2.26%
9.8 CVSS
CVE-2022-35534
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifi_multi_ssid.shtml.

EPSS: 2.26%
9.8 CVSS
CVE-2022-35533
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml.

EPSS: 2.26%
9.8 CVSS
CVE-2022-35526
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml.

EPSS: 2.26%
9.8 CVSS
CVE-2022-35525
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml.

EPSS: 2.36%
9.8 CVSS
CVE-2022-35524
RCE

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.

EPSS: 2.26%