Wavlink Wl-wn530hg4 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Wavlink Wl-wn530hg4 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2020-15490 — CVSS 9.8 (critical): An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts…
• CVE-2022-34045 — CVSS 9.8 (critical): Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at…
• CVE-2020-15489 — CVSS 9.8 (critical): An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in…
• CVE-2020-10971 — CVSS 8.8 (high): An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution…
• CVE-2020-12266 — CVSS 7.5 (high): An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store…
• CVE-2022-34047 — CVSS 7.5 (high): An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via…
• CVE-2022-48166 — CVSS 7.5 (high): An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log…
• CVE-2022-34049 — CVSS 5.3 (medium): An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration…