Skip to main content

Wl Wn533A8 Firmware

62 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2024-39803 Jan 14, 15:15 CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.7%
CVE-2024-39802 Jan 14, 15:15 CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39801 Jan 14, 15:15 CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.5%
CVE-2024-39800 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.5%
CVE-2024-39799 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.5%
CVE-2024-39798 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.5%
CVE-2024-39795 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.1%
CVE-2024-39794 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.1%
CVE-2024-39793 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.1%
CVE-2024-39790 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.1%
CVE-2024-39789 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.1%
CVE-2024-39788 Jan 14, 15:15 CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.1%
CVE-2024-39787 Jan 14, 15:15 CRITICAL POC Act Now

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.2%
CVE-2024-39786 Jan 14, 15:15 CRITICAL POC Act Now

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.2%
CVE-2024-39785 Jan 14, 15:15 CRITICAL POC Act Now

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-39784 Jan 14, 15:15 CRITICAL POC Act Now

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-39783 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-39782 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39781 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-39774 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.8%
CVE-2024-39773 Jan 14, 15:15 MEDIUM POC This Month

An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
5.3
EPSS
0.6%
CVE-2024-39770 Jan 14, 15:15 CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.7%
CVE-2024-39769 Jan 14, 15:15 CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.5%
CVE-2024-39768 Jan 14, 15:15 CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.7%
CVE-2024-39765 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-39764 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-39763 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39762 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39761 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
1.2%
CVE-2024-39760 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
1.2%
CVE-2024-39759 Jan 14, 15:15 CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
1.2%
CVE-2024-39757 Jan 14, 15:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39756 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39754 Jan 14, 15:15 CRITICAL POC Act Now

A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
0.3%
CVE-2024-39608 Jan 14, 15:15 CRITICAL POC Act Now

A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
0.3%
CVE-2024-39604 Jan 14, 15:15 CRITICAL POC Act Now

A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.0
EPSS
0.8%
CVE-2024-39603 Jan 14, 15:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39602 Jan 14, 15:15 CRITICAL POC Act Now

An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39370 Jan 14, 15:15 CRITICAL POC Act Now

An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39367 Jan 14, 15:15 CRITICAL POC Act Now

An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39363 Jan 14, 15:15 CRITICAL POC THREAT Act Now

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 10.7%.

XSS Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.6
EPSS
10.7%
CVE-2024-39360 Jan 14, 15:15 CRITICAL POC Act Now

An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39359 Jan 14, 15:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39358 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39357 Jan 14, 15:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39299 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.3%
CVE-2024-39294 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-39288 Jan 14, 15:15 CRITICAL POC THREAT Act Now

A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 14.8%.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
14.8%
CVE-2024-39280 Jan 14, 15:15 CRITICAL POC Act Now

An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
5.9%
CVE-2024-39273 Jan 14, 15:15 CRITICAL POC Act Now

A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.0
EPSS
0.3%
CVE-2024-38666 Jan 14, 15:15 CRITICAL POC Act Now

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
5.9%
CVE-2024-37357 Jan 14, 15:15 CRITICAL POC THREAT Act Now

A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 14.4%.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
14.4%
CVE-2024-37186 Jan 14, 15:15 CRITICAL POC Act Now

An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
5.1%
CVE-2024-37184 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.8%
CVE-2024-36493 Jan 14, 15:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-36295 Jan 14, 15:15 CRITICAL POC Act Now

A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
7.9%
CVE-2024-36290 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
1.6%
CVE-2024-36272 Jan 14, 15:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2024-36258 Jan 14, 15:15 CRITICAL POC THREAT Act Now

A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 16.5%.

RCE Buffer Overflow Stack Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
16.5%
CVE-2024-34544 Jan 14, 15:15 CRITICAL POC Act Now

A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
0.9%
CVE-2024-34166 Jan 14, 15:15 CRITICAL POC THREAT Act Now

An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 10.2%.

RCE Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
10.0
EPSS
10.2%
CVE-2024-21797 Jan 14, 15:15 CRITICAL POC Act Now

A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVSS 3.1
9.1
EPSS
7.9%
CVE-2024-39803
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39802
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39801
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39800
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39799
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39798
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39795
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39794
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39793
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39790
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39789
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39788
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39787
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39786
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39785
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39784
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39783
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39782
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39781
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39774
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39773
EPSS 1% CVSS 5.3
MEDIUM POC This Month

An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Information Disclosure Wl Wn533A8 Firmware +1
NVD
CVE-2024-39770
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39769
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39768
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39765
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39764
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39763
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39762
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39761
EPSS 1% CVSS 10.0
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39760
EPSS 1% CVSS 10.0
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39759
EPSS 1% CVSS 10.0
CRITICAL POC Act Now

Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39757
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware +1
NVD
CVE-2024-39756
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39754
EPSS 0% CVSS 10.0
CRITICAL POC Act Now

A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39608
EPSS 0% CVSS 10.0
CRITICAL POC Act Now

A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39604
EPSS 1% CVSS 9.0
CRITICAL POC Act Now

A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39603
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware +1
NVD
CVE-2024-39602
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39370
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Wl Wn533A8 Firmware +1
NVD
CVE-2024-39367
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39363
EPSS 11% CVSS 9.6
CRITICAL POC THREAT Act Now

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 10.7%.

XSS Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39360
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-39359
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware +1
NVD
CVE-2024-39358
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39357
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware +1
NVD
CVE-2024-39299
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39294
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39288
EPSS 15% CVSS 9.1
CRITICAL POC THREAT Act Now

A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 14.8%.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39280
EPSS 6% CVSS 9.1
CRITICAL POC Act Now

An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-39273
EPSS 0% CVSS 9.0
CRITICAL POC Act Now

A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-38666
EPSS 6% CVSS 9.1
CRITICAL POC Act Now

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-37357
EPSS 14% CVSS 9.1
CRITICAL POC THREAT Act Now

A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 14.4%.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-37186
EPSS 5% CVSS 9.1
CRITICAL POC Act Now

An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-37184
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-36493
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Wl Wn533A8 Firmware +1
NVD
CVE-2024-36295
EPSS 8% CVSS 9.1
CRITICAL POC Act Now

A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-36290
EPSS 2% CVSS 10.0
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-36272
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-36258
EPSS 16% CVSS 10.0
CRITICAL POC THREAT Act Now

A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 16.5%.

RCE Buffer Overflow Stack Overflow +2
NVD
CVE-2024-34544
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wl Wn533A8 Firmware Wavlink
NVD
CVE-2024-34166
EPSS 10% CVSS 10.0
CRITICAL POC THREAT Act Now

An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 10.2%.

RCE Command Injection Wl Wn533A8 Firmware +1
NVD
CVE-2024-21797
EPSS 8% CVSS 9.1
CRITICAL POC Act Now

A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wl Wn533A8 Firmware Wavlink
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy