Critical severity9.8NVD Advisory· Published Jul 7, 2022· Updated Jun 17, 2026

CVE-2022-34592

Description

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request.

Affected products

Wavlink/Wl Wn575a3 Firmware
cpe:2.3:o:wavlink:wl-wn575a3_firmware:rpt75a3.v4300.201217:*:*:*:*:*:*:*
Wavlink/WL-WN575A3llm-fuzzy2 versions
RPT75A3.V4300.201217+ 1 more
- (no CPE)range: RPT75A3.V4300.201217
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/winmt/CVE/blob/main/WAVLINK%20WL-WN575A3/README.mdnvdExploitThird Party Advisory
github.com/winmt/my-vuls/tree/main/WAVLINK%20WL-WN575A3nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000