Wn530h4 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WF

Product

Wn530h4 Firmware

by Wavlink · last CVE Oct 27, 2024

27

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities27 In the news0 Timeline

Severity mix

Critical 18High 9Medium 0Low 0

Severity

All severities27 Critical18 High9 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Wn530h4 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-10194	8.8	1%	Oct 20	WAVLINK WN530H4/WN530HG4/WN572HG3 Front-End Authentication Page login.cgi Goto_chidx stack-based overflow Affected: through 20221028
CVE-2022-35517	8.8	2%	Aug 9	WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway,… Affected: All versions, or not specified
CVE-2020-12123	8.1	0%	Oct 2	CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not… Affected: m30h4.v5030.190403
CVE-2020-12127	7.5	7%	Oct 2	An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings,… Affected: m30h4.v5030.190403
CVE-2020-10974	7.5	2%	May 7	An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password Affected: All versions, or not specified
CVE-2020-12266	7.5	2%	Apr 27	An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage Affected: All versions, or not specified
CVE-2024-10429	7.2	18%	Oct 27	WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection Affected: 20220721
CVE-2024-10428	7.2	15%	Oct 27	WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection Affected: 20220721
CVE-2024-10193	7.2	15%	Oct 20	WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection Affected: through 20221028