CVE-2022-35519: Command Injection
Published Aug 9, 2022
·Updated
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter addmac, which leads to command injection in page /cliblacklist.shtml.
Affected Software
10 affected components
Wavlink Wn572hp3 Firmware
Wavlink WN572HP3
Wavlink Wn533a8 Firmware
Wavlink WN533A8
Wavlink Wn530h4 Firmware
Wavlink WN530H4
Wavlink Wn535g3 Firmware
Wavlink WN535G3
Wavlink Wn531p3 Firmware
Wavlink WN531P3
Event History
Aug 9, 2022
CVE Published
via MITRE·07:55 PM
Data Sourced
via MITRE·07:55 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this WAVLINK router vulnerability?
The vulnerability ID of this WAVLINK router vulnerability is CVE-2022-35519.
2
What is the severity of CVE-2022-35519?
CVE-2022-35519 has a severity rating of 9.8 (critical).
3
Which software versions are affected by CVE-2022-35519?
The following WAVLINK router firmware versions are affected: WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3.
4
What is the CWE category associated with CVE-2022-35519?
The CWE category associated with CVE-2022-35519 is CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
5
How can I fix CVE-2022-35519?
To fix CVE-2022-35519, update your WAVLINK router firmware to the latest version available from the manufacturer.