← Database

CVE-2022-35537

CRITICAL CVSS: 9.8 Published: 2022-08-10 Modified: 2026-06-17

Description

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.

Affected Platforms

Wavlink Wn572Hp3 FirmwareWavlink Wn533A8 FirmwareWavlink Wn572Hp3Wavlink Wn531P3 FirmwareWavlink Wn530H4 FirmwareWavlink Wn535G3 FirmwareWavlink Wn533A8Wavlink Wn530H4Wavlink Wn531P3Wavlink Wn535G3

Weakness Type

NVD-CWE-Other

References