PT-2022-22885 · Wavlink · Wavlink Wn535G3+4

Published 2022-08-09 · Updated 2023-08-08 · CVE-2022-35522

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3

Description The issue is related to a lack of filtering on certain parameters in the adm.cgi file, specifically ppp username, ppp passwd, rwan gateway, rwan mask, and rwan ip. This lack of filtering leads to command injection in the /wan.shtml page.

Recommendations For WAVLINK WN572HP3, update the firmware to remove the vulnerability in the adm.cgi file by filtering parameters ppp username, ppp passwd, rwan gateway, rwan mask, and rwan ip. For WAVLINK WN533A8, update the firmware to remove the vulnerability in the adm.cgi file by filtering parameters ppp username, ppp passwd, rwan gateway, rwan mask, and rwan ip. For WAVLINK WN530H4, update the firmware to remove the vulnerability in the adm.cgi file by filtering parameters ppp username, ppp passwd, rwan gateway, rwan mask, and rwan ip. For WAVLINK WN535G3, update the firmware to remove the vulnerability in the adm.cgi file by filtering parameters ppp username, ppp passwd, rwan gateway, rwan mask, and rwan ip. For WAVLINK WN531P3, update the firmware to remove the vulnerability in the adm.cgi file by filtering parameters ppp username, ppp passwd, rwan gateway, rwan mask, and rwan ip.

Exploit

Fix

Related Identifiers

CVE-2022-35522

Affected Products

Wavlink Wn530H4

Wavlink Wn531P3

Wavlink Wn533A8

Wavlink Wn535G3

Wavlink Wn572Hp3

References · 3

• 🔥 https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wanshtml-command-injection-in-admcgi · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-35522 · Security Note
• https://t.me/cibsecurity/47913 · Telegram Post