CVE-2022-34592: Command Injection
Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-34592?
CVE-2022-34592 is a command injection vulnerability found in Wavlink WL-WN575A3 RPT75A3.V4300.201217 firmware, allowing attackers to execute arbitrary commands via a crafted POST request.
How severe is CVE-2022-34592?
CVE-2022-34592 has a severity score of 9.8, which is considered critical.
How can attackers exploit CVE-2022-34592?
Attackers can exploit CVE-2022-34592 by sending a crafted POST request to the affected device, allowing them to execute arbitrary commands.
Is Wavlink WL-WN575A3 vulnerable to CVE-2022-34592?
No, Wavlink WL-WN575A3 itself is not vulnerable to CVE-2022-34592, only the RPT75A3.V4300.201217 firmware is affected.
How can I mitigate the CVE-2022-34592 vulnerability?
To mitigate the CVE-2022-34592 vulnerability, it is recommended to apply the latest firmware patch provided by Wavlink.