Description (CNA)
A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Wavlink / Wavlink AC3000 | affected M33A8.V5030.210505 |
CWE
CWE-74
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.