Back to Database
Status published
High
CVE-2022-2488
WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection
Vulnerability Description
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2488
Credits & Attribution
No credits recorded in the NVD database.
References
More from WAVLINK
View All →CVE-2025-5408
WAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflow
Critical
9.3
CVE-2024-10429
WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection
High
8.6
CVE-2024-10428
WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection
High
8.6
CVE-2024-10194
WAVLINK WN530H4/WN530HG4/WN572HG3 Front-End Authentication Page login.cgi Goto_chidx stack-based overflow
High
8.7
CVE-2024-10193
WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection
Medium
5.1
Affected Vendor
WAVLINK
View all reports →Affected Software
WN535K2, WN535K3
Vulnerable Versions:
Unknown
Timeline
Official Publish:
July 20th, 2022
Last Modified:
April 15th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H