CVE-2025-50755: Command Injection

Published Sep 2, 2025

Updated

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsyscmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Software

3 affected components

Wavlink WN535K3

All of the following

Wavlink Wl-wn535k3 Firmware=20191010

Wavlink Wl-wn535k3

Event History

Sep 2, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-50755?

CVE-2025-50755 has been classified with a critical severity level due to its potential for command injection.

How do I fix CVE-2025-50755?

To fix CVE-2025-50755, update your Wavlink WN535K3 device to the latest firmware version that addresses this vulnerability.

What type of vulnerability is CVE-2025-50755?

CVE-2025-50755 is a command injection vulnerability that allows attackers to execute arbitrary commands on the affected device.

Who is affected by CVE-2025-50755?

Only users of the Wavlink WN535K3 version 20191010 are affected by CVE-2025-50755.

How can exploitation of CVE-2025-50755 impact my device?

Exploitation of CVE-2025-50755 can lead to unauthorized access and control over the device, potentially compromising the network.