CVE-2022-34592: Wavlink Wl-WN575A3 Firmware

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request.

Affected products

• Wavlink Wl-WN575A3 Firmware: version rpt75a3.v4300.201217 only

Published 2022-07-07. Last modified 2026-06-17.