Login Request a demo
WF
Product
Wn535g3 Firmware
by Wavlink · last CVE Aug 9, 2022
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 16High 6Medium 1Low 0
Severity
All severities23Critical16High6Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wn535g3 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-35517
8.8
2%
Aug 9
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway,…
Affected: All versions, or not specified
CVE-2022-34576
7.5
4%
Jul 25
A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request
Affected: m35g3r.v5030.180927
CVE-2022-31846
7.5
7%
Jun 14
A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function
Affected: m35g3r.v5030.180927
CVE-2022-31845
7.5
9%
Jun 14
A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function
Affected: m35g3r.v5030.180927
CVE-2020-10974
7.5
2%
May 7
An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password
Affected: All versions, or not specified
CVE-2020-12266
7.5
2%
Apr 27
An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage
Affected: All versions, or not specified
Showing 6