VYPR

WL-WN530H4

by Wavlink

Source repositories

CVEs (28)

  • CVE-2020-12124CriOct 2, 2020
    Wavlink
    WL-WN530H4
    risk 0.70cvss 9.8epss 0.75

    A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication.

  • CVE-2025-44868CriMay 2, 2025
    Wavlink
    WL-WN530H4
    risk 0.64cvss 9.8epss 0.03

    Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

  • CVE-2022-35538CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to command injection in page /wifi_mesh.shtml.

  • CVE-2022-35537CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.

  • CVE-2022-35536CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml.

  • CVE-2022-35535CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.

  • CVE-2022-35534CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifi_multi_ssid.shtml.

  • CVE-2022-35533CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml.

  • CVE-2022-35526CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml.

  • CVE-2022-35525CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml.

  • CVE-2022-35524CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.

  • CVE-2022-35523CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml.

  • CVE-2022-35522CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command injection in page /wan.shtml.

  • CVE-2022-35521CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml.

  • CVE-2022-35520CriAug 10, 2022
    Wavlink
    WN531P3
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml.

  • CVE-2022-35519CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml.

  • CVE-2022-35518CriAug 10, 2022
    Wavlink
    WN533A8
    risk 0.64cvss 9.8epss 0.02

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.

  • CVE-2020-12126CriOct 2, 2020
    Wavlink
    WL-WN530H4
    risk 0.64cvss 9.8epss 0.01

    Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint.

  • CVE-2020-12125CriOct 2, 2020
    Wavlink
    WL-WN530H4
    risk 0.64cvss 9.8epss 0.04

    A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary machine instructions as root without authentication.

  • CVE-2024-10194HigOct 20, 2024
    Wavlink
    WN530HG4
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto_chidx of the file login.cgi of the component Front-End Authentication Page. The manipulation of the argument wlanUrl leads to…

Page 1 of 2