GCVE - cpe:2.3:a:wavlink:wl-wn578w2:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wavlink:wl-wn578w2:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wavlink (`b3b0198b-0ff8-5498-8769-561cf3fe0e3d`)
Product	Wl Wn578W2 (`e3dae8fe-5a94-5831-be06-01a9b59147b8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-10359`	vulnerable	2026-06-08 07:02:26.742204	Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection HIGH (7.3) A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T13:02:05.356Z Updated: 2025-09-15T15:36:15.362Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323773 https://vuldb.com/?ctiid.323773 https://vuldb.com/?submit.643444 https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/wireless.cgi/add_mac/ https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/add_mac#proof-of-concept-poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10358`	vulnerable	2026-06-08 07:02:26.741511	Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection HIGH (7.3) A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T08:02:06.212Z Updated: 2025-09-15T15:47:54.244Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323772 https://vuldb.com/?ctiid.323772 https://vuldb.com/?submit.643438 https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac#proof-of-concept-poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10325`	vulnerable	2026-06-08 07:02:26.713080	Wavlink WL-WN578W2 login.cgi sub_401BA4 command injection MEDIUM (6.3) A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-12T20:02:05.804Z Updated: 2025-09-12T20:25:31.094Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323751 https://vuldb.com/?ctiid.323751 https://vuldb.com/?submit.643436 https://vuldb.com/?submit.643437 https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/login.cgi/login/readme.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10324`	vulnerable	2026-06-08 07:02:26.712465	Wavlink WL-WN578W2 firewall.cgi sub_401C5C command injection HIGH (7.3) A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.cgi. This manipulation of the argument pingFrmWANFilterEnabled/blockSynFloodEnabled/blockPortScanEnabled/remoteManagementEnabled causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-12T19:32:05.157Z Updated: 2025-09-12T19:44:54.702Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323750 https://vuldb.com/?ctiid.323750 https://vuldb.com/?submit.643435 https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/firewall.cgi/websSysFirewall	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10323`	vulnerable	2026-06-08 07:02:26.711699	Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injection HIGH (7.3) A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wizard_rep.shtml. The manipulation of the argument sel_EncrypTyp results in command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-12T19:02:05.495Z Updated: 2025-09-12T19:20:20.664Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323749 https://vuldb.com/?ctiid.323749 https://vuldb.com/?submit.643434 https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/adm.cgi/wizard_rep.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10322`	vulnerable	2026-06-08 07:02:26.710998	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10321`	vulnerable	2026-06-08 07:02:26.708822	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.