VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 20, 2022· Updated Apr 15, 2025

WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

CVE-2022-2488

Description

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Wavlink/WN535K3llm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: n/a
    • (no CPE)range: n/a

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.