PT-2022-16941 · Wavlink · Wavlink Wn535K2+1

Published 2022-07-20 · Updated 2022-07-26 · CVE-2022-2487

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WAVLINK WN535K2 WAVLINK WN535K3

Description A critical issue has been identified, affecting the /cgi-bin/nightled.cgi file. The manipulation of the start hour argument leads to os command injection. The exploit has been disclosed to the public and may be used.

Recommendations For WAVLINK WN535K2, restrict access to the /cgi-bin/nightled.cgi file to minimize the risk of exploitation. For WAVLINK WN535K3, avoid using the start hour argument in the affected API endpoint until the issue is resolved. As a temporary workaround, consider disabling the nightled.cgi functionality until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-2487

Affected Products

Wavlink Wn535K2

Wavlink Wn535G3

References · 4

• 🔥 https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20nightled.cgi%20.md · Exploit
• 🔥 https://vuldb.com/?id.204538 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-2487 · Security Note
• https://t.me/cibsecurity/46638 · Telegram Post