PT-2022-22880
CVE-2022-35518
·
Published
2022-08-09
·
Updated
2025-10-20
Description by
CVSS 3.1
4.6
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
WAVLINK WN572HP3
WAVLINK WN533A8
WAVLINK WN530H4
WAVLINK WN535G3
WAVLINK WN531P3
Description
The issue is related to a lack of filtering on parameters:
User1Passwd and User1 in the nas.cgi file, which leads to command injection in the /nas disk.shtml page.Recommendations
For WAVLINK WN572HP3, update the firmware to remove the vulnerability in the
nas.cgi file.
For WAVLINK WN533A8, update the firmware to remove the vulnerability in the nas.cgi file.
For WAVLINK WN530H4, update the firmware to remove the vulnerability in the nas.cgi file.
For WAVLINK WN535G3, update the firmware to remove the vulnerability in the nas.cgi file.
For WAVLINK WN531P3, update the firmware to remove the vulnerability in the nas.cgi file. Found an issue in the description? Have something to add? Feel free to write us 👾