WL-WN530BE1-A vulnerabilities
4 known vulnerabilities in WL-WN530BE1-A from WAVLINK. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 10.0 Critical severity
WL-WN530BE1-A: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remo
- 9.8 Critical severity
WL-WN530BE1-A: Improper Neutralization of Special Elements used in an OS Command
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen().
- 10.0 Critical severity
WL-WN530BE1-A: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in
- 9.9 Critical severity
WL-WN530BE1-A: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The e