CVE-2022-34577: Critical severity wavlink wifi-repeater firmware vulnerability

Published Jul 25, 2022

Updated

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.

Affected Software

2 affected components

Wavlink Wn535g3 Firmware=m35g3r.v5030.180927

Wavlink WN535G3

Event History

Jul 25, 2022

CVE Published

via MITRE·09:37 PM

Data Sourced

via MITRE·09:37 PM

Description

Frequently Asked Questions

What is CVE-2022-34577?

CVE-2022-34577 is a vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 that allows attackers to execute arbitrary code via a crafted POST request.

How severe is CVE-2022-34577?

CVE-2022-34577 has a severity rating of 9.8, which is considered critical.

What software versions are affected by CVE-2022-34577?

Wavlink Wn535g3 Firmware version m35g3r.v5030.180927 is affected by CVE-2022-34577.

How can attackers exploit CVE-2022-34577?

Attackers can exploit CVE-2022-34577 by sending a specially crafted POST request to the adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927.

Is Wavlink WN535G3 vulnerable to CVE-2022-34577?

No, Wavlink WN535G3 is not vulnerable to CVE-2022-34577.

Is there a reference for CVE-2022-34577?

Yes, you can find more information about CVE-2022-34577 at the following links: [CVE-2022-31311](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31311) and [GitHub - WAVLINK WN535 G3 Command Execution Vulnerability](https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN535%20G3_Command%20Execution%20Vulnerability.md).