Wn533a8 Firmware vulnerabilities

2 known vulnerabilities in Wn533a8 Firmware from WAVLINK. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Wn572hp3 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2022-35518Aug 10, 2022WAVLINKEPSS 1.58%

  WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.

• 7.5 High severity

  Wn533a8 Firmware: Incorrect Authorization

  CVE-2022-34046Jul 20, 2022WAVLINKEPSS 21.1%

  An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].