Wavlink Wn530h4 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Wavlink Wn530h4 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (27)

• CVE-2022-35536 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to…
• CVE-2022-35538 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list…
• CVE-2022-35534 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to…
• CVE-2022-35535 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection…
• CVE-2022-35537 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to…
• CVE-2020-12125 — CVSS 9.8 (critical): A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an…
• CVE-2020-12126 — CVSS 9.8 (critical): Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to…
• CVE-2020-12124 — CVSS 9.8 (critical): A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an…
• CVE-2022-35518 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command…
• CVE-2022-35519 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection…
• CVE-2022-35520 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which…
• CVE-2022-35521 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled…
• CVE-2022-35522 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway…
• CVE-2022-35523 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to…
• CVE-2022-35524 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp…
• CVE-2022-35525 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in…
• CVE-2022-35526 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page…
• CVE-2022-35533 — CVSS 9.8 (critical): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command…
• CVE-2024-10194 — CVSS 8.8 (high): A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the…
• CVE-2022-35517 — CVSS 8.8 (high): WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid…
• CVE-2020-12123 — CVSS 8.1 (high): CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router…
• CVE-2020-10974 — CVSS 7.5 (high): An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in…
• CVE-2020-12127 — CVSS 7.5 (high): An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an…
• CVE-2020-12266 — CVSS 7.5 (high): An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store…
• CVE-2024-10428 — CVSS 7.2 (high): A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affects the…
• CVE-2024-10429 — CVSS 7.2 (high): A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the function…
• CVE-2024-10193 — CVSS 4.7 (medium): A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the…