CVE Feed

    Dashboard / CVE / CVE-2022-37149

    CVE-2022-37149

    WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.

    Published:Aug 30, 2022
    Last Modified:Nov 21, 2024
    EPS:Aug 30, 2022
    EPSS Score:0.13713
    CVSS Score:9.8

    Affected Products

    Vendor
    Wavlink
    Product
    Wl-wn575a3
    Vendor
    Wavlink
    Product
    Wl-wn575a3 Firmware

    Exploits

    https://github.com/fxc233/iot-vul/blob/main/WAVLINK/WN575A3/Readme.mdhttps://github.com/fxc233/iot-vul/blob/main/WAVLINK/WN575A3/Readme.md

    Related CVEs

    CVE-2025-25528 (CVSS 5.1) — Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performi…
    CVE-2023-38861 (CVSS 9.8) — An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via us…
    CVE-2022-34592 (CVSS 9.8) — Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the fu…
    CVE-2020-10971 (CVSS 8.8) — An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that …
    CVE-2020-10974 (CVSS 7.5) — An issue was discovered affecting a backup feature where a crafted POST request returns the current configurat…
    CVE-2020-12266 (CVSS 7.5) — An issue was discovered where there are multiple externally accessible pages that do not require any sort of a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High