CVE Feed

    Dashboard / CVE / CVE-2023-38861

    CVE-2023-38861

    An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username parameter of the set_sys_adm function in adm.cgi.

    Published:Aug 15, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 15, 2023
    EPSS Score:0.01461
    CVSS Score:9.8

    Affected Products

    Vendor
    Wavlink
    Product
    Wl-wn575a3
    Vendor
    Wavlink
    Product
    Wl-wn575a3 Firmware
    Vendor
    Wavlink
    Product
    Wl Wnj575a3

    Exploits

    https://github.com/TTY-flag/my_iot_vul/tree/main/WAVLINK/WL-WN575A3https://github.com/TTY-flag/my_iot_vul/tree/main/WAVLINK/WL-WN575A3

    Related CVEs

    CVE-2025-25528 (CVSS 5.1) — Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performi…
    CVE-2022-37149 (CVSS 9.8) — WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when opera…
    CVE-2022-34592 (CVSS 9.8) — Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the fu…
    CVE-2020-10971 (CVSS 8.8) — An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that …
    CVE-2020-10974 (CVSS 7.5) — An issue was discovered affecting a backup feature where a crafted POST request returns the current configurat…
    CVE-2020-12266 (CVSS 7.5) — An issue was discovered where there are multiple externally accessible pages that do not require any sort of a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High