Wavlink nightled.cgi CVE-2022-2487 命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-2487
• https://www.cve.org/CVERecord?id=CVE-2022-2487
• https://github.com/advisories/GHSA-gv4v-6v97-75hc
• https://vulners.com/nuclei/NUCLEI:CVE-2022-2487
• https://www.tenable.com/cve/CVE-2022-2487
• https://avd.aquasec.com/nvd/2022/cve-2022-2487/
• https://vuldb.com/vuln/204538
• https://pentest-tools.com/vulnerabilities-exploits/wavlink-wn535k2-wn535k3-os-command-injection_2643
• https://db.gcve.eu/vuln/cve-2022-2487

Related Vulnerabilities

• Wavlink WL-WN578W2跨站脚本漏洞(CVE-2026-4544)
• wavlink-router-live-api-cgi-rce: WavLink Router Live API cgi RCE
• PoCCVE-2020-10973: WAVLINK - Access Control
• PoCCVE-2020-12124: WAVLINK WN530H4 live_api.cgi - Command Injection
• PoCCVE-2020-12127: WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure
• PoCCVE-2020-13117: Wavlink Multiple AP - Remote Command Injection
• PoCCVE-2021-44260: WAVLINK AC1200 - Information Disclosure
• PoCCVE-2022-2486: Wavlink WN535K2/WN535K3 - OS Command Injection
• PoCCVE-2022-2487: Wavlink WN535K2/WN535K3 - OS Command Injection
• PoCCVE-2022-2488: Wavlink WN535K2/WN535K3 - OS Command Injection
• PoCCVE-2022-30489: Wavlink WN-535G3 - Cross-Site Scripting
• PoCCVE-2022-31845: WAVLINK WN535 G3 - Information Disclosure
• PoCCVE-2022-31846: WAVLINK WN535 G3 - Information Disclosure