Command Injection Vulnerability in WAVLINK WL-WN575A3 RPT75A3.V4300.201217 adm.cgi

CVE-2022-37149 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.

Learn more about our User Device Pen Test.