Command Injection Vulnerability in WAVLINK Routers
CVE-2022-35526
9.8CRITICAL
What is CVE-2022-35526?
The WAVLINK routers, including models WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3, have a command injection vulnerability due to insufficient input validation on the 'key' parameter in the login.cgi page. This oversight allows remote attackers to execute arbitrary commands on the affected devices by manipulating the request sent to '/login.shtml', potentially leading to unauthorized access and device compromise.