Wavlink WN530HG4 Firmware vulnerabilities

6 CVEs affecting Wavlink WN530HG4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-10429, published 2024-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-10429, published 2024-10-27. High severity, CVSS 7.2. EPSS: 18.2% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the function set_ipv6 of the file internet.cgi. The manipulation of the…
CVE-2024-10193, published 2024-10-20. High severity, CVSS 7.2. EPSS: 15.5% chance of exploitation in the next 30 days. A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function ping_ddns of the file internet.cgi. The manipulation of…
CVE-2024-10428, published 2024-10-27. High severity, CVSS 7.2. EPSS: 14.8% chance of exploitation in the next 30 days. A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affects the function set_ipv6 of the file firewall.cgi. The manipulation…
CVE-2020-10973, published 2020-05-07. High severity, CVSS 7.5. EPSS: 7.6% chance of exploitation in the next 30 days. An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current…
CVE-2020-10972, published 2020-05-07. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a…
CVE-2024-10194, published 2024-10-20. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto_chidx of the file login.cgi of the component…