CVEs

38,065 total · page 261 of 762

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-10811	Ivanti EPM	Cri	0.64	9.8	0.04	Jan 14, 2025	Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-39803	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39802	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39801	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39800	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39799	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39798	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39795	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39794	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39793	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39790	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39789	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39788	Wavlink AC3000	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39787	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.03	Jan 14, 2025	Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…
CVE-2024-39786	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.03	Jan 14, 2025	Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…
CVE-2024-39785	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.06	Jan 14, 2025	Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39784	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.06	Jan 14, 2025	Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39783	Wavlink AC3000	Cri	0.60	9.1	0.04	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39782	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.04	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39781	Wavlink AC3000	Cri	0.60	9.1	0.04	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39774	Wavlink AC3000 M33A8	Cri	0.59	9.1	0.01	Jan 14, 2025	A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39770	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39769	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39768	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39765	Wavlink AC3000	Cri	0.60	9.1	0.05	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39764	Wavlink AC3000 M33A8	Cri	0.59	9.1	0.04	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39763	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.05	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39762	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.06	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39761	Wavlink AC3000 M33A8.V5030.210505	Cri	0.66	10.0	0.08	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39760	Wavlink AC3000	Cri	0.66	10.0	0.17	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39759	Wavlink AC3000 M33A8.V5030.210505	Cri	0.66	10.0	0.08	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39757	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39756	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39754	Wavlink AC3000 M33A8.V5030.210505	Cri	0.65	10.0	0.01	Jan 14, 2025	A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
CVE-2024-39608	Wavlink AC3000	Cri	0.65	10.0	0.01	Jan 14, 2025	A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability.
CVE-2024-39604	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.0	0.02	Jan 14, 2025	A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVE-2024-39603	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39602	Wavlink AC3000 M33A8	Cri	0.59	9.1	0.02	Jan 14, 2025	An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39370	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39367	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.08	Jan 14, 2025	An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39363	Wavlink AC3000 M33A8.V5030.210505	Cri	0.66	9.6	0.48	Jan 14, 2025	A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request…
CVE-2024-39360	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.12	Jan 14, 2025	An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39359	Wavlink AC3000 M33A8	Cri	0.59	9.1	0.02	Jan 14, 2025	A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39358	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39357	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39299	Wavlink AC3000 M33A8	Cri	0.59	9.1	0.02	Jan 14, 2025	A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39294	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39288	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.13	Jan 14, 2025	A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39280	Wavlink AC3000	Cri	0.62	9.1	0.34	Jan 14, 2025	An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39273	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.0	0.01	Jan 14, 2025	A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

CVE-2024-10811CriJan 14, 2025
Ivanti
EPM
risk 0.64cvss 9.8epss 0.04
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-39803CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39802CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39801CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39800CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39799CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39798CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39795CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39794CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39793CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39790CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39789CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39788CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39787CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.03
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…
CVE-2024-39786CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.03
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…
CVE-2024-39785CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.06
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39784CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.06
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39783CriJan 14, 2025
Wavlink
AC3000
risk 0.60cvss 9.1epss 0.04
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39782CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.04
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39781CriJan 14, 2025
Wavlink
AC3000
risk 0.60cvss 9.1epss 0.04
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39774CriJan 14, 2025
Wavlink
AC3000 M33A8
risk 0.59cvss 9.1epss 0.01
A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39770CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39769CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39768CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39765CriJan 14, 2025
Wavlink
AC3000
risk 0.60cvss 9.1epss 0.05
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39764CriJan 14, 2025
Wavlink
AC3000 M33A8
risk 0.59cvss 9.1epss 0.04
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39763CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.05
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39762CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.06
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39761CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.66cvss 10.0epss 0.08
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39760CriJan 14, 2025
Wavlink
AC3000
risk 0.66cvss 10.0epss 0.17
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39759CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.66cvss 10.0epss 0.08
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39757CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39756CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39754CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.65cvss 10.0epss 0.01
A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
CVE-2024-39608CriJan 14, 2025
Wavlink
AC3000
risk 0.65cvss 10.0epss 0.01
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability.
CVE-2024-39604CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.0epss 0.02
A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVE-2024-39603CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39602CriJan 14, 2025
Wavlink
AC3000 M33A8
risk 0.59cvss 9.1epss 0.02
An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39370CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39367CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.08
An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39363CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.66cvss 9.6epss 0.48
A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request…
CVE-2024-39360CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.12
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39359CriJan 14, 2025
Wavlink
AC3000 M33A8
risk 0.59cvss 9.1epss 0.02
A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39358CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39357CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39299CriJan 14, 2025
Wavlink
AC3000 M33A8
risk 0.59cvss 9.1epss 0.02
A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39294CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39288CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.13
A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39280CriJan 14, 2025
Wavlink
AC3000
risk 0.62cvss 9.1epss 0.34
An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39273CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.0epss 0.01
A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.