wavlink wn572hg3 firmware - vulnerabilities and exploits

(subscribe to this query)

An issue exists where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4,...

Wavlink Wn530hg4 Firmware M30hg4.v5030.191116 Wavlink Wn531g3 Firmware -Wavlink Wn572hg3 Firmware -

1 Github repository

An issue exists affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink ...

Wavlink Wl-wn575a3 Firmware Rpt75a3.v4300.180801 Wavlink Wl-wn579g3 Firmware M79x3.v5030.180719 Wavlink Wn531a6 Firmware -Wavlink Wn535g3 Firmware -Wavlink Wn530h4 Firmware -Wavlink Wn57x93 Firmware -Wavlink Wn572hg3 Firmware -Wavlink Wn575a4 Firmware -Wavlink Wn578a2 Firmware -Wavlink Wn579g3 Firmware -Wavlink Wn579x3 Firmware -Wavlink Jetstream Ac3000 Firmware -Wavlink Jetstream Erac3000 Firmware -

An issue exists where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be access...

Wavlink Wl-wn579g3 Firmware M79x3.v5030.180719 Wavlink Wl-wn575a3 Firmware Rpt75a3.v4300.180801 Wavlink Wl-wn530hg4 Firmware M30hg4.v5030.191116 Wavlink Wn531g3 Firmware -Wavlink Wn533a8 Firmware -Wavlink Wn531a6 Firmware -Wavlink Wn551k1 Firmware -Wavlink Wn535g3 Firmware -Wavlink Wn530h4 Firmware -Wavlink Wn57x93 Firmware -Wavlink Wn578a2 Firmware -Wavlink Wn579g3 Firmware -Wavlink Wn579x3 Firmware -Wavlink Jetstream Ac3000 Firmware -Wavlink Jetstream Erac3000 Firmware -

An issue exists on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the same time. The POST request itself is not validated to ensure it came from the active se...

Wavlink Wl-wn575a3 Firmware Rpt75a3.v4300.180801 Wavlink Wl-wn530hg4 Firmware M30hg4.v5030.191116 Wavlink Wl-wn579g3 Firmware M79x3.v5030.180719

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook