critical9.8
CVE-2022-37149
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi.
Impact
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wavlink | Wl-Wn575a3 Firmware | Version rpt75a3.v4300.201217 |