Vulnerabilities (CVE)

Filtered by vendor Wavlink Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34574 1 Wavlink 1 Wifi-repeater Firmware 2023-08-08 N/A 5.7 MEDIUM
An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tftpd32.ini.
CVE-2022-34573 1 Wavlink 1 Wifi-repeater Firmware 2023-08-08 N/A 6.3 MEDIUM
An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessing the page mb_wifibasic.shtml.
CVE-2022-34572 1 Wavlink 1 Wifi-repeater Firmware 2023-08-08 N/A 5.7 MEDIUM
An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page tftp.txt.
CVE-2022-34048 1 Wavlink 2 Wn533a8, Wn533a8 Firmware 2022-07-27 N/A 6.1 MEDIUM
Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter.
CVE-2022-34049 1 Wavlink 2 Wl-wn530hg4, Wl-wn530hg4 Firmware 2022-07-27 N/A 5.3 MEDIUM
An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.
CVE-2022-30489 1 Wavlink 2 Wn535g3, Wn535g3 Firmware 2022-05-23 4.3 MEDIUM 6.1 MEDIUM
WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi.