Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

wavlink CVEs

Beta · best-effort

203 CVEs tagged to vendor wavlink — 97 Critical, 46 High, 29 Medium, 31 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2024-39359

Published Jan 14, 2025

A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39358

Published Jan 14, 2025

A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffe…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39357

Published Jan 14, 2025

A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39299

Published Jan 14, 2025

A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-bas…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39294

Published Jan 14, 2025

A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based bu…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39288

Published Jan 14, 2025

A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39280

Published Jan 14, 2025

An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbit…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39273

Published Jan 14, 2025

A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware updat…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-38666

Published Jan 14, 2025

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-37357

Published Jan 14, 2025

A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buff…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-37186

Published Jan 14, 2025

An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitra…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-37184

Published Jan 14, 2025

A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-36493

Published Jan 14, 2025

A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can le…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-36295

Published Jan 14, 2025

A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary comman…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-36290

Published Jan 14, 2025

A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based b…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-36272

Published Jan 14, 2025

A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buf…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-36258

Published Jan 14, 2025

A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request c…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-34544

Published Jan 14, 2025

A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary co…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-34166

Published Jan 14, 2025

An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-21797

Published Jan 14, 2025

A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary comm…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-54747

Published Dec 6, 2024

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-54745

Published Dec 6, 2024

WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-10429

Published Oct 27, 2024

A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the function set_ipv6 of the file internet.cgi. The man…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

CVE-2024-10428

Published Oct 27, 2024

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affects the function set_ipv6 of the file firewall.cg…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

CVE-2024-10194

Published Oct 20, 2024

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto_chidx of the file login.cgi o…

CVSS 8.7 · High

Vendor/product tagsBeta · best-effort

Showing 101-125 of 203 CVEsPage 5 of 9