Command Injection Vulnerability in WAVLINK Wireless Routers
CVE-2022-35534
9.8CRITICAL
What is CVE-2022-35534?
WAVLINK wireless routers, including models WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3, are susceptible to a command injection vulnerability due to insufficient filtering on the parameters hiddenSSID32g and SSID2G2 in the wireless.cgi interface. This weakness allows attackers to execute arbitrary commands, creating potential security risks through the page /wifi_multi_ssid.shtml. Proper security measures should be implemented to mitigate this vulnerability and protect network integrity.