CVE-2022-34592 in WL-WN575A3

Résumé

par VulDB • 07/06/2026

Il firmware Wavlink WL-WN575A3 RPT75A3.V4300.201217 presenta una vulnerabilità di command injection nella funzione obtw. Questa vulnerabilità consente agli attaccanti di eseguire comandi arbitrari tramite una richiesta POST appositamente creata (crafted).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 26/06/2022
• Divulgation: 07/07/2022
• Modérer: accepté
• Entrée: VDB-203378
• CPE: prêt
• CWE: CWE-77 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.03187
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-34592
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-34592
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-34592/