← Database

CVE-2022-35517

HIGH CVSS: 8.8 Published: 2022-08-10 Modified: 2026-06-17

Description

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml.

Affected Platforms

Wavlink Wn572Hp3 FirmwareWavlink Wn533A8 FirmwareWavlink Wn572Hp3Wavlink Wn531P3 FirmwareWavlink Wn530H4 FirmwareWavlink Wn535G3 FirmwareWavlink Wn533A8Wavlink Wn530H4Wavlink Wn531P3Wavlink Wn535G3

Weakness Type

NVD-CWE-Other

References