Lucene search

[email protected]CVE-2022-35519

HistoryAug 10, 2022 - 8:15 p.m.

CVE-2022-35519

2022-08-1020:15:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2022-35519

wavlink

wn572hp3

wn533a8

wn530h4

wn535g3

wn531p3

firewall.cgi

command injection

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.2%

JSON

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml.

CPENameOperatorVersion
wavlink:wn572hp3_firmwarewavlink wn572hp3 firmwareeq-
wavlink:wn533a8_firmwarewavlink wn533a8 firmwareeq-
wavlink:wn530h4_firmwarewavlink wn530h4 firmwareeq-
wavlink:wn535g3_firmwarewavlink wn535g3 firmwareeq-
wavlink:wn531p3_firmwarewavlink wn531p3 firmwareeq-

CPE	Name	Operator	Version
wavlink:wn572hp3_firmware	wavlink wn572hp3 firmware	eq	-
wavlink:wn533a8_firmware	wavlink wn533a8 firmware	eq	-
wavlink:wn530h4_firmware	wavlink wn530h4 firmware	eq	-
wavlink:wn535g3_firmware	wavlink wn535g3 firmware	eq	-
wavlink:wn531p3_firmware	wavlink wn531p3 firmware	eq	-

References

github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-deleting-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.2%

JSON

Related for CVE-2022-35519

cvelist1 prion1