Vulnerabilities > External Control of System or Configuration Setting

DATE CVE VULNERABILITY TITLE RISK
2025-01-14 CVE-2024-39788 Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39789 Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39790 Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39793 Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39794 Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39795 Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39798 Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39799 Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2025-01-14 CVE-2024-39800 Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505.
network
low complexity
CWE-15
critical
 9.1
9.1
2024-12-05 CVE-2024-51544 External Control of System or Configuration Setting vulnerability in ABB products
Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb CWE-15
8.2
8.2