medium6.5
CVE-2025-50757
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter.
Impact
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wavlink | Wl-Wn535k3 Firmware | Version 20191010 |