Wl Wn533a8 Firmware

CVEs (63)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-39762	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.06	Jan 14, 2025	Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39367	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.08	Jan 14, 2025	An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39360	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.12	Jan 14, 2025	An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39288	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.13	Jan 14, 2025	A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-37357	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.10	Jan 14, 2025	A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-34544	Wavlink AC3000 M33A8.V5030.210505	Cri	0.60	9.1	0.08	Jan 14, 2025	A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39803	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39802	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39801	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39800	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39799	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39798	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39795	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39794	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39793	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39790	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39789	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39788	Wavlink AC3000	Cri	0.59	9.1	0.01	Jan 14, 2025	Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39787	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…
CVE-2024-39786	Wavlink AC3000 M33A8.V5030.210505	Cri	0.59	9.1	0.02	Jan 14, 2025	Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…

CVE-2024-39762CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.06
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger…
CVE-2024-39367CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.08
An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-39360CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.12
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39288CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.13
A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this…
CVE-2024-37357CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.10
A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-34544CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.60cvss 9.1epss 0.08
A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2024-39803CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39802CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39801CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39800CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39799CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39798CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
CVE-2024-39795CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39794CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39793CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39790CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39789CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39788CriJan 14, 2025
Wavlink
AC3000
risk 0.59cvss 9.1epss 0.01
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these…
CVE-2024-39787CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…
CVE-2024-39786CriJan 14, 2025
Wavlink
AC3000 M33A8.V5030.210505
risk 0.59cvss 9.1epss 0.02
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A…

Page 2 of 4