CVE-2022-35523: Command Injection
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter delmac and parameter flag, which leads to command injection in page /cliblacklist.shtml.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security flaw?
The vulnerability ID is CVE-2022-35523.
What is the title of this vulnerability?
The title of this vulnerability is 'WAVLINK WN572HP3 WN533A8 WN530H4 WN535G3 WN531P3 firewall.cgi has no filtering on parameter del_mac ...'.
What is the severity level of CVE-2022-35523?
The severity of CVE-2022-35523 is rated as critical with a severity value of 9.8.
Which software or devices are affected by this vulnerability?
The WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 devices with their respective firmware versions are affected by this vulnerability.
What is the CWE category associated with this vulnerability?
The CWE category associated with this vulnerability is CWE-77.
How does the vulnerability manifest and what is the impact?
The vulnerability is manifested as a command injection in the page /cli_black_list.shtml, which can lead to unauthorized execution of commands and potentially compromise the affected device's security.
Is there a patch or fix available for this vulnerability?
At the moment, there is no information available regarding a patch or fix for this vulnerability. It is recommended to follow the provided reference for any updates or mitigation steps.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the reference provided: [https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi](https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi)