Unrated severityNVD Advisory· Published Jan 14, 2025· Updated Nov 3, 2025
CVE-2024-39763
CVE-2024-39763
Description
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the gateway POST parameter.
Affected products
2- Wavlink/Wavlink AC3000v5Range: M33A8.V5030.210505
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.