CVE-2025-44868: Command Injection
Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the pingtest function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-44868?
CVE-2025-44868 is classified as a high severity vulnerability due to its potential for command injection.
How do I fix CVE-2025-44868?
To mitigate CVE-2025-44868, update the Wavlink WL-WN530H4 firmware to the latest version that addresses this vulnerability.
What is the impact of CVE-2025-44868?
CVE-2025-44868 allows attackers to execute arbitrary commands on the device, potentially compromising network security.
Which devices are affected by CVE-2025-44868?
CVE-2025-44868 affects the Wavlink WL-WN530H4 device with the firmware version from August 2022.
How is CVE-2025-44868 exploited?
CVE-2025-44868 can be exploited by sending a crafted request with a manipulated pingIp parameter to the adm.cgi interface.