← Database

CVE-2022-37149

CRITICAL CVSS: 9.8 Published: 2022-08-30 Modified: 2026-06-17

Description

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.

Affected Platforms

Wavlink Wl-Wn575A3 FirmwareWavlink Wl-Wn575A3

Weakness Type

CWE-78

References