A vulnerability was found in WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3 and WN531P3. It has been rated as critical. Affected by this issue is some unknown processing of the file firewall.cgi. The manipulation of the argument remoteManagementEnabled/blockPortScanEnabled/pingFrmWANFilterEnabled/blockSynFloodEnabled with an unknown input leads to a command injection vulnerability. Using CWE to declare the problem leads to CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. CVE summarizes:

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml.

The weakness was disclosed 08/11/2022. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2022-35521 since 07/11/2022. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 09/04/2022). The MITRE ATT&CK project declares the attack technique as T1202.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Productinfo

Vendor

• WAVLINK

Name

• WN530H4
• WN531P3
• WN533A8
• WN535G3
• WN572HP3

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion