GCVE - cpe:2.3:h:wavlink:wl-wn535k3:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:wavlink:wl-wn535k3:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Wavlink (`b3b0198b-0ff8-5498-8769-561cf3fe0e3d`)
Product	Wl Wn535K3 (`42d505a7-4cfa-514e-88d0-11bcb367c4c9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-50757`	not_vulnerable	2026-06-08 07:31:11.062893	Details available Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Published: 2025-09-02T00:00:00.000Z Updated: 2025-09-02T19:34:44.806Z Open on db.gcve.eu Reference links https://github.com/Summermu/VulnForIoT/tree/main/Wavlink_WN535K3/set_sys_adm_username/readme.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-50755`	not_vulnerable	2026-06-08 07:31:11.059980	Details available Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Published: 2025-09-02T00:00:00.000Z Updated: 2025-09-02T19:33:59.467Z Open on db.gcve.eu Reference links https://github.com/Summermu/VulnForIoT/tree/main/Wavlink_WN535K3/set_sys_cmd/readme.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2488`	not_vulnerable	2026-06-08 05:43:35.672439	WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection HIGH (8) A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used. Published: 2022-07-20T11:35:34.000Z Updated: 2025-04-15T14:04:06.986Z Open on db.gcve.eu Reference links https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20touchlist_sync.cgi.md https://vuldb.com/?id.204539	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2487`	not_vulnerable	2026-06-08 05:43:35.671676	WAVLINK WN535K2/WN535K3 nightled.cgi os command injection HIGH (8) A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has been disclosed to the public and may be used. Published: 2022-07-20T11:35:27.000Z Updated: 2025-04-15T14:04:15.957Z Open on db.gcve.eu Reference links https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20nightled.cgi%20.md https://vuldb.com/?id.204538	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2486`	not_vulnerable	2026-06-08 05:43:35.670679	WAVLINK WN535K2/WN535K3 os command injection HIGH (8) A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used. Published: 2022-07-20T11:35:21.000Z Updated: 2025-04-15T14:04:25.065Z Open on db.gcve.eu Reference links https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20mesh.cgi.md https://vuldb.com/?id.204537	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.