Submit #422811: wavlink WN530H4,WN530HG4,WN572HG3 WN530H4-WAVLINK_20220721,WN530HG4-WAVLINK_20220809,WN572HG3-WAVLINK_WO_20221028 Command Injectioninfo

Titlewavlink WN530H4,WN530HG4,WN572HG3 WN530H4-WAVLINK_20220721,WN530HG4-WAVLINK_20220809,WN572HG3-WAVLINK_WO_20221028 Command Injection
DescriptionThere is a command injection vulnerability in the ddns-related functions of the internet.cgi component of the WN530H4, WN530HG4, and WN572HG3 network devices of Wavlink, which allows an authenticated attacker to execute arbitrary code.
Source⚠️ https://docs.google.com/document/d/13XWnFITW31u5J8HeQj8Zm-7oLt-M1DtQ/
User
 Stellar Lab (UID 76086)
Submission10/12/2024 10:33 (2 years ago)
Moderation10/19/2024 09:36 (7 days later)
StatusAccepted
VulDB entry280967 [WAVLINK WN530H4/WN530HG4/WN572HG3 up to 20221028 internet.cgi ping_ddns DDNS command injection]
Points16

Interested in the pricing of exploits?

See the underground prices here!