CVE-2022-35523: Command Injection
First published: Wed Aug 10 2022(Updated: )
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wavlink Wn572hp3 Firmware | ||
| WAVLINK WN572HP3 | ||
| Wavlink Wn533a8 Firmware | ||
| Wavlink WN533A8 | ||
| Wavlink Wn530h4 Firmware | ||
| Wavlink WN530H4 | ||
| Wavlink Wn535g3 Firmware | ||
| Wavlink WN535G3 | ||
| Wavlink Wn531p3 Firmware | ||
| Wavlink Wn531p3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this security flaw?
The vulnerability ID is CVE-2022-35523.
What is the title of this vulnerability?
The title of this vulnerability is 'WAVLINK WN572HP3 WN533A8 WN530H4 WN535G3 WN531P3 firewall.cgi has no filtering on parameter del_mac ...'.
What is the severity level of CVE-2022-35523?
The severity of CVE-2022-35523 is rated as critical with a severity value of 9.8.
Which software or devices are affected by this vulnerability?
The WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 devices with their respective firmware versions are affected by this vulnerability.
What is the CWE category associated with this vulnerability?
The CWE category associated with this vulnerability is CWE-77.
How does the vulnerability manifest and what is the impact?
The vulnerability is manifested as a command injection in the page /cli_black_list.shtml, which can lead to unauthorized execution of commands and potentially compromise the affected device's security.
Is there a patch or fix available for this vulnerability?
At the moment, there is no information available regarding a patch or fix for this vulnerability. It is recommended to follow the provided reference for any updates or mitigation steps.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the reference provided: [https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi](https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi)
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-api
- collector/nvd-index
- vendor/wavlink
- canonical/wavlink wn572hp3 firmware
- canonical/wavlink wn572hp3
- canonical/wavlink wn533a8 firmware
- canonical/wavlink wn533a8
- canonical/wavlink wn530h4 firmware
- canonical/wavlink wn530h4
- canonical/wavlink wn535g3 firmware
- canonical/wavlink wn535g3
- canonical/wavlink wn531p3 firmware
- canonical/wavlink wn531p3