WF
Product
Wn530h4 Firmware
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 9Medium 0Low 0
Watch
Add Wn530h4 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35518 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml Affected: All versions, or not specified |
| CVE-2022-35519 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml Affected: All versions, or not specified |
| CVE-2022-35520 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in… Affected: All versions, or not specified |
| CVE-2022-35521 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and… Affected: All versions, or not specified |
| CVE-2022-35522 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command… Affected: All versions, or not specified |
| CVE-2022-35523 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page… Affected: All versions, or not specified |
| CVE-2022-35524 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and… Affected: All versions, or not specified |
| CVE-2022-35525 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml Affected: All versions, or not specified |
| CVE-2022-35526 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml Affected: All versions, or not specified |
| CVE-2022-35533 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml Affected: All versions, or not specified |
| CVE-2022-35534 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page… Affected: All versions, or not specified |
| CVE-2022-35535 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml Affected: All versions, or not specified |
| CVE-2022-35536 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml Affected: All versions, or not specified |
| CVE-2022-35537 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml Affected: All versions, or not specified |
| CVE-2022-35538 | 9.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to… Affected: All versions, or not specified |
| CVE-2020-12126 | 9.8 | Oct 2 | Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration… Affected: m30h4.v5030.190403 |
| CVE-2020-12125 | 9.8 | Oct 2 | A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary machine… Affected: m30h4.v5030.190403 |
| CVE-2020-12124 | 9.8 | Oct 2 | A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux… Affected: m30h4.v5030.190403 |
| CVE-2024-10194 | 8.8 | Oct 20 | A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 Affected: through 20221028 |
| CVE-2022-35517 | 8.8 | Aug 9 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway,… Affected: All versions, or not specified |
| CVE-2020-12123 | 8.1 | Oct 2 | CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not… Affected: m30h4.v5030.190403 |
| CVE-2020-12127 | 7.5 | Oct 2 | An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings,… Affected: m30h4.v5030.190403 |
| CVE-2020-10974 | 7.5 | May 7 | An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password Affected: All versions, or not specified |
| CVE-2020-12266 | 7.5 | Apr 27 | An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage Affected: All versions, or not specified |
| CVE-2024-10429 | 7.2 | Oct 27 | A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 Affected: 20220721 |
| CVE-2024-10428 | 7.2 | Oct 27 | A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 Affected: 20220721 |
| CVE-2024-10193 | 7.2 | Oct 20 | A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical Affected: through 20221028 |
Showing 27