Wavlink Wn551k1 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Wavlink Wn551k1 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2020-10973 — CVSS 7.5 (high): An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh…
• CVE-2020-12266 — CVSS 7.5 (high): An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store…
• CVE-2024-38892 — CVSS 6.5 (medium): An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component.
• CVE-2024-38894 — CVSS 5.3 (medium): WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlist_sync.cgi.
• CVE-2024-38895 — CVSS 5.3 (medium): WAVLINK WN551K1'live_mfg.shtml enables attackers to obtain sensitive router information.
• CVE-2024-38896 — CVSS 5.3 (medium): WAVLINK WN551K1 found a command injection vulnerability through the start_hour parameter of /cgi-bin/nightled.cgi.
• CVE-2024-38897 — CVSS 5.3 (medium): WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.