CVE-2022-35519: Command Injection
First published: Wed Aug 10 2022(Updated: )
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wavlink Wn572hp3 Firmware | ||
| WAVLINK WN572HP3 | ||
| Wavlink Wn533a8 Firmware | ||
| Wavlink WN533A8 | ||
| Wavlink Wn530h4 Firmware | ||
| Wavlink WN530H4 | ||
| Wavlink Wn535g3 Firmware | ||
| Wavlink WN535G3 | ||
| Wavlink Wn531p3 Firmware | ||
| Wavlink Wn531p3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this WAVLINK router vulnerability?
The vulnerability ID of this WAVLINK router vulnerability is CVE-2022-35519.
What is the severity of CVE-2022-35519?
CVE-2022-35519 has a severity rating of 9.8 (critical).
Which software versions are affected by CVE-2022-35519?
The following WAVLINK router firmware versions are affected: WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3.
What is the CWE category associated with CVE-2022-35519?
The CWE category associated with CVE-2022-35519 is CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
How can I fix CVE-2022-35519?
To fix CVE-2022-35519, update your WAVLINK router firmware to the latest version available from the manufacturer.
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/tags
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/wavlink
- canonical/wavlink wn572hp3 firmware
- canonical/wavlink wn572hp3
- canonical/wavlink wn533a8 firmware
- canonical/wavlink wn533a8
- canonical/wavlink wn530h4 firmware
- canonical/wavlink wn530h4
- canonical/wavlink wn535g3 firmware
- canonical/wavlink wn535g3
- canonical/wavlink wn531p3 firmware
- canonical/wavlink wn531p3