CVE-2022-35535 - CVE House
Back to Database
Status published Critical CVE-2022-35535

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering...

Vulnerability Description

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-35535

Credits & Attribution

No credits recorded in the NVD database.

References

More from wavlink

View All →
CVE-2022-48166
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated...
Unknown 0
CVE-2022-48165
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
High 7.5
CVE-2022-48164
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
Unknown 0
CVE-2022-44356
WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325...
Unknown 0
CVE-2022-37149
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection...
Critical 9.8

Affected Vendor

Affected Software

wn572hp3 firmware, wn533a8 firmware, wn530h4 firmware, wn535g3 firmware, wn531p3 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: August 9th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.