Vulnerabilities > Wavlink > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-10-02 CVE-2020-12124 OS Command Injection vulnerability in Wavlink Wn530H4 Firmware M30H4.V5030.190403
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication.
network
low complexity
wavlink CWE-78
critical
9.8
2020-07-01 CVE-2020-15490 Classic Buffer Overflow vulnerability in Wavlink Wl-Wn530Hg4 Firmware M30Hg4.V5030.191116
An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices.
network
low complexity
wavlink CWE-120
critical
9.8
2020-07-01 CVE-2020-15489 OS Command Injection vulnerability in Wavlink Wl-Wn530Hg4 Firmware M30Hg4.V5030.191116
An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices.
network
low complexity
wavlink CWE-78
critical
9.8