Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_hour_value` POST parameter.

OneIdentity - IAM and Cybersecurity Learning Hub


Welcome to the IAM and Cybersecurity Learning Hub, where we provide information about topics that work together to provide a unified identity security strategy, securing your users, data and applications from cyberattacks. We update this area regularly with new content, so be sure to check in regularly.

Listed: