CVE-2024-39363

Critical CVSS: 9.6

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Vendor

Wavlink

Product

Wl-wn533a8 Firmware

CWE

CWE-80

Yayın Tarihi

2025-01-14 15:15:19

Güncelleme

2025-08-25 18:29:21

Source Identifier

talos-cna@cisco.com

KEV Date Added

Kategoriler

CWE-80 Wl-wn533a8 Firmware CRITICAL Wavlink 2025

Referanslar

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2017 https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2017

Benzer Kayıtlar

High

CVE-2026-5004

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin…

Medium

CVE-2026-3716

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the…

High

CVE-2026-3715

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/fire…

High

CVE-2026-3703

A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Ex…

Medium

CVE-2026-3704

A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file…

Medium

CVE-2026-3662

A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the fil…