CVE-2025-50757: Command Injection

Published Sep 2, 2025

Updated

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Software

3 affected components

Wavlink WN535K3

All of the following

Wavlink Wl-wn535k3 Firmware=20191010

Wavlink Wl-wn535k3

Event History

Sep 2, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-50757?

CVE-2025-50757 has been classified as a high severity vulnerability due to its potential for remote command execution.

How do I fix CVE-2025-50757?

To mitigate CVE-2025-50757, it is recommended to update the Wavlink WN535K3 firmware to the latest version provided by the vendor.

What type of vulnerability is CVE-2025-50757?

CVE-2025-50757 is a command injection vulnerability that affects the username parameter in the set_sys_adm function.

What are the potential impacts of CVE-2025-50757?

Exploitation of CVE-2025-50757 can allow attackers to execute arbitrary commands on the affected Wavlink WN535K3 device.

Which devices are affected by CVE-2025-50757?

CVE-2025-50757 specifically affects the Wavlink WN535K3 device running firmware version 20191010.