Login Request a demo
WF
Product
Wl-wn575a3 Firmware
by Wavlink · last CVE Feb 11, 2025
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 3Medium 1Low 0
Severity
All severities7Critical3High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wl-wn575a3 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38861
9.8
2%
Aug 15
An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username parameter of the set_sys_adm function in adm.cgi
Affected: r75a3_v1410_220513
CVE-2022-37149
9.8
3%
Aug 30
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi
Affected: rpt75a3.v4300.201217
CVE-2022-34592
9.8
3%
Jul 7
Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw
Affected: rpt75a3.v4300.201217
CVE-2020-10971
8.8
3%
May 7
An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an…
Affected: rpt75a3.v4300.180801
CVE-2020-10974
7.5
2%
May 7
An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password
Affected: rpt75a3.v4300.180801
CVE-2020-12266
7.5
2%
Apr 27
An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage
Affected: rpt75a3.v4300.180801
CVE-2025-25528
5.1
4%
Feb 11
Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data
Affected: rpt75a3.v4300
Showing 7