← Database

CVE-2022-35518

CRITICAL CVSS: 9.8 Published: 2022-08-10 Modified: 2026-06-17

Description

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.

Affected Platforms

Wavlink Wn572Hp3 FirmwareWavlink Wn533A8 FirmwareWavlink Wn572Hp3Wavlink Wn531P3 FirmwareWavlink Wn530H4 FirmwareWavlink Wn535G3 FirmwareWavlink Wn533A8Wavlink Wn530H4Wavlink Wn531P3Wavlink Wn535G3

Weakness Type

NVD-CWE-Other, CWE-77

References