Wavlink Wl-WN530H4 Firmware vulnerabilities

2 CVEs affecting Wavlink Wl-WN530H4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-44868, published 2025-05-02.

More from Wavlink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-48165, published 2023-02-03. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to download configuration data and log files and obtain admin…
• CVE-2025-44868, published 2025-05-02. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute…