Peiwen.Huang

**Name of the Vulnerable Software and Affected Versions** WAVLINK WN535 G3 version M35G3R.V5030.180927 **Description** A vulnerability in the adm.cgi component allows attackers to execute arbitrary code via a crafted POST request. **Recommendations** For WAVLINK WN535 G3 version M35G3R.V5030.180927, consider disabling the adm.cgi component until a patch is available to prevent exploitation.

**Name of the Vulnerable Software and Affected Versions** WAVLINK AERIAL X 1200M version M79X3.V5030.180719 **Description** The issue allows attackers to execute arbitrary commands via a crafted POST request to the adm.cgi endpoint. This is achieved by sending a specifically designed request to the vulnerable endpoint, potentially leading to command execution. **Recommendations** For WAVLINK AERIAL X 1200M version M79X3.V5030.180719, as a temporary workaround, consider restricting access to the adm.cgi endpoint until a patch is available. Avoid using the adm.cgi endpoint in production environments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WAVLINK WN535 G3 version M35G3R.V5030.180927 **Description** A vulnerability in the live mfg.shtml file allows attackers to obtain sensitive router information via execution of the `exec cmd` function. **Recommendations** For WAVLINK WN535 G3 version M35G3R.V5030.180927, consider restricting access to the live mfg.shtml file until a patch is available. As a temporary workaround, avoid using the `exec cmd` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.