Approved changes feed: RSS · Atom

cpe:2.3:o:wavlink:wn579x3_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductWn579X3 Firmware (c7cf3dcb-afce-5c09-ad24-f0e262e33d74)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3380 vulnerable 2026-06-08 06:09:39.447066 Wavlink WN579X3 Ping Test adm.cgi injection
MEDIUM (4.7)
A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-06-23T09:31:03.911Z
Updated: 2024-08-02T06:55:03.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13117 vulnerable 2026-06-08 05:18:00.190342 Details available
Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.
Published: 2021-02-09T18:53:18.000Z
Updated: 2025-08-19T13:24:22.716Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.