CVE-2022-35521: Command Injection
First published: Wed Aug 10 2022(Updated: )
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wavlink Wn572hp3 Firmware | ||
| WAVLINK WN572HP3 | ||
| Wavlink Wn533a8 Firmware | ||
| Wavlink WN533A8 | ||
| Wavlink Wn530h4 Firmware | ||
| Wavlink WN530H4 | ||
| Wavlink Wn535g3 Firmware | ||
| Wavlink WN535G3 | ||
| Wavlink Wn531p3 Firmware | ||
| Wavlink Wn531p3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this WAVLINK firmware issue?
The vulnerability ID for this WAVLINK firmware issue is CVE-2022-35521.
What is the severity rating of CVE-2022-35521?
CVE-2022-35521 has a severity rating of 9.8 (critical).
Which parameters in the firewall.cgi of WAVLINK routers are affected?
The parameters affected in the firewall.cgi of WAVLINK routers are remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled, and blockSynFloodEnabled.
What is the impact of the command injection in page /man_security.shtml?
The command injection in page /man_security.shtml can lead to unauthorized execution of commands on the router.
Is there a fix available for CVE-2022-35521?
Currently, there is no information available about a fix for CVE-2022-35521. It is recommended to follow the provided reference link for updates and patches.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/wavlink
- canonical/wavlink wn572hp3 firmware
- canonical/wavlink wn572hp3
- canonical/wavlink wn533a8 firmware
- canonical/wavlink wn533a8
- canonical/wavlink wn530h4 firmware
- canonical/wavlink wn530h4
- canonical/wavlink wn535g3 firmware
- canonical/wavlink wn535g3
- canonical/wavlink wn531p3 firmware
- canonical/wavlink wn531p3