Vulnerabilidades en Wavlink

137 resultados
Análisis Vexday

O ecossistema de vulnerabilidades da Wavlink apresenta um volume expressivo de CVEs catalogadas, com 64 classificadas como críticas — número que demanda atenção redobrada de equipes de segurança que operam dispositivos desta fabricante. Embora nenhuma CVE conste atualmente no catálogo KEV da CISA, posicionando a taxa de exploração ativa abaixo da média geral, a presença de 16 falhas com prova de conceito pública eleva o risco de escalada, especialmente considerando que 14 vulnerabilidades surgiram nos últimos 90 dias, indicando superfície de ataque em expansão recente. A falha mais preocupante no momento é CVE-2024-39363, associada a CWE-77 (injeção de comandos), com score EPSS de 0,4809 — o mais alto observado no portfólio —, sugerindo probabilidade não desprezível de exploração ativa em horizonte próximo. Organizações que utilizam equipamentos Wavlink devem priorizar a aplicação de correções, monitorar ativamente CVEs com PoC disponível e tratar CWE-77 como vetor de risco estrutural neste ambiente.

CVE-2026-7690MEDIUMWavlink WL-WN570HA1 adm.cgi set_sys_adm command injectionEPSS 5.0%CVE-2026-3704MEDIUMWavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injectionEPSS 4.9%CVE-2024-39763CRITICALMultiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505EPSS 4.8%CVE-2024-39783CRITICALMultiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciaEPSS 4.5%CVE-2024-39781CRITICALMultiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciaEPSS 4.5%CVE-2024-39764CRITICALMultiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505EPSS 4.2%CVE-2023-3380MEDIUMWavlink WN579X3 Ping Test adm.cgi injectionEPSS 3.9%CVE-2024-39782CRITICALMultiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciaEPSS 3.7%CVE-2026-7692MEDIUMWavlink WL-WN570HA1 adm.cgi ping_ddns command injectionEPSS 3.2%CVE-2026-7691MEDIUMWavlink WL-WN570HA1 adm.cgi set_sys_cmd command injectionEPSS 3.2%CVE-2024-39787CRITICALMultiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially EPSS 2.5%CVE-2024-39786CRITICALMultiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially EPSS 2.5%CVE-2024-39603CRITICALA stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210EPSS 2.4%CVE-2024-39359CRITICALA stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A speEPSS 2.4%CVE-2024-39757CRITICALA stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciaEPSS 2.4%CVE-2024-39357CRITICALA stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciEPSS 2.4%CVE-2024-39602CRITICALAn external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially craEPSS 2.3%CVE-2024-39370CRITICALAn arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 2.2%CVE-2026-13538MEDIUMWavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injectionEPSS 2.2%CVE-2026-4163CRITICALWavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injectionEPSS 2.1%