← Database

CVE-2022-35524

CRITICAL CVSS: 9.8 Published: 2022-08-10 Modified: 2026-06-17

Description

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.

Affected Platforms

Wavlink Wn572Hp3 FirmwareWavlink Wn533A8 FirmwareWavlink Wn572Hp3Wavlink Wn531P3 FirmwareWavlink Wn530H4 FirmwareWavlink Wn535G3 FirmwareWavlink Wn533A8Wavlink Wn530H4Wavlink Wn531P3Wavlink Wn535G3

Weakness Type

NVD-CWE-Other

References