Wl-wn575a3 Firmware vulnerabilities

3 known vulnerabilities in Wl-wn575a3 Firmware from WAVLINK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  wl_wnj575a3: Improper Neutralization of Special Elements used in a Command

  CVE-2023-38861Aug 15, 2023WAVLINKEPSS 1.64%

  An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username parameter of the set_sys_adm function in adm.cgi.

• 9.8 Critical severity

  Wl-wn575a3 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-37149Aug 30, 2022WAVLINKEPSS 2.75%

  WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.

• 9.8 Critical severity

  Wl-wn575a3 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2022-34592Jul 7, 2022WAVLINKEPSS 3.28%

  Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request.