Critical severity9.1NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026
CVE-2024-39762
CVE-2024-39762
Description
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the netmask POST parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Wavlink/Wavlink AC3000v5Range: M33A8.V5030.210505
- cpe:2.3:o:wavlink:wl-wn533a8_firmware:m33a8.v5030.210505:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- talosintelligence.com/vulnerability_reports/TALOS-2024-2020nvdExploitThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2024-2020nvd
News mentions
0No linked articles in our index yet.