Command Injection Vulnerability in WAVLINK Router Products
CVE-2022-35523
9.8CRITICAL
What is CVE-2022-35523?
The WAVLINK routers, specifically models WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3, are susceptible to a command injection vulnerability within the firewall.cgi script. This flaw arises from the lack of input filtering on the 'del_mac' and 'flag' parameters while interfacing with the /cli_black_list.shtml page, allowing an attacker to inject malicious commands. Exploiting this vulnerability could enable unauthorized command execution on the affected devices, posing significant security risks.