Critical severity9.8NVD Advisory· Published Aug 30, 2022· Updated Jun 17, 2026

CVE-2022-37149

Description

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.

Affected products

Wavlink/WL-WN575A3llm-fuzzy
Range: RPT75A3.V4300.201217
WAVLINK/WL-WN575A3 RPT75A3.V4300.201217description
Wavlink/Wl Wn575a3 Firmware
cpe:2.3:o:wavlink:wl-wn575a3_firmware:rpt75a3.v4300.201217:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/fxc233/iot-vul/blob/main/WAVLINK/WN575A3/Readme.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000