Wl Wn533a8 Firmware

CVEs (63)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-39761	Wavlink AC3000 M33A8.V5030.210505	Cri	0.66	10.0	0.08	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39760	Wavlink AC3000	Cri	0.66	10.0	0.17	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39759	Wavlink AC3000 M33A8.V5030.210505	Cri	0.66	10.0	0.08	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39363	Wavlink AC3000 M33A8.V5030.210505	Cri	0.66	9.6	0.48	Jan 14, 2025	A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request…
CVE-2024-36258	Wavlink AC3000	Cri	0.66	10.0	0.12	Jan 14, 2025	A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this…
CVE-2024-34166	Wavlink AC3000	Cri	0.66	10.0	0.16	Jan 14, 2025	An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this…
CVE-2024-39754	Wavlink AC3000 M33A8.V5030.210505	Cri	0.65	10.0	0.01	Jan 14, 2025	A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
CVE-2024-39608	Wavlink AC3000	Cri	0.65	10.0	0.01	Jan 14, 2025	A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability.
CVE-2024-36290	Wavlink AC3000 M33A8.V5030.210505	Cri	0.65	10.0	0.01	Jan 14, 2025	A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVE-2024-39280	Wavlink AC3000	Cri	0.62	9.1	0.34	Jan 14, 2025	An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-38666	Wavlink AC3000	Cri	0.61	9.1	0.19	Jan 14, 2025	An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-37186	Wavlink AC3000 M33A8.V5030.210505	Cri	0.61	9.1	0.23	Jan 14, 2025	An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-36295	Wavlink AC3000 M33A8.V5030.210505	Cri	0.61	9.1	0.21	Jan 14, 2025	A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-21797	Wavlink AC3000	Cri	0.61	9.1	0.21	Jan 14, 2025	A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39785	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.06	Jan 14, 2025	Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39784	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.06	Jan 14, 2025	Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39783	Wavlink AC3000	Cri	0.60	9.1	0.04	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39781	Wavlink AC3000	Cri	0.60	9.1	0.04	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39765	Wavlink AC3000	Cri	0.60	9.1	0.05	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39763	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.05	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…

CVE-2024-39761CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.66cvss 10.0epss 0.08
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39760CriJan 14, 2025
Wavlink
AC3000
risk 0.66cvss 10.0epss 0.17
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39759CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.66cvss 10.0epss 0.08
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these…
CVE-2024-39363CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.66cvss 9.6epss 0.48
A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request…
CVE-2024-36258CriJan 14, 2025
Wavlink
AC3000
risk 0.66cvss 10.0epss 0.12
A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this…
CVE-2024-34166CriJan 14, 2025
Wavlink
AC3000
risk 0.66cvss 10.0epss 0.16
An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this…
CVE-2024-39754CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.65cvss 10.0epss 0.01
A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
CVE-2024-39608CriJan 14, 2025
Wavlink
AC3000
risk 0.65cvss 10.0epss 0.01
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability.
CVE-2024-36290CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.65cvss 10.0epss 0.01
A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVE-2024-39280CriJan 14, 2025
Wavlink
AC3000
risk 0.62cvss 9.1epss 0.34
An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-38666CriJan 14, 2025
Wavlink
AC3000
risk 0.61cvss 9.1epss 0.19
An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-37186CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.61cvss 9.1epss 0.23
An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-36295CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.61cvss 9.1epss 0.21
A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-21797CriJan 14, 2025
Wavlink
AC3000
risk 0.61cvss 9.1epss 0.21
A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39785CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.06
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39784CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.06
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39783CriJan 14, 2025
Wavlink
AC3000
risk 0.60cvss 9.1epss 0.04
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39781CriJan 14, 2025
Wavlink
AC3000
risk 0.60cvss 9.1epss 0.04
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39765CriJan 14, 2025
Wavlink
AC3000
risk 0.60cvss 9.1epss 0.05
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39763CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.05
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…

Page 1 of 4