References https://wenku.csdn.net/answer/2yadxxi00u https://cn-sec.com/archives/2370720.html https://www.ddpoc.com/poc/DVB-2022-3733.html https://blog.csdn.net/wuwenshequ/article/details/140398011 https://cn-sec.com/archives/1964991.html https://blog.csdn.net/wuwenshequ/article/details/141311680 https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce https://github.com/db44k/CVE-2020-12124 https://pentest-tools.com/vulnerabilities-exploits/wavlink-wn530h4-live-apicgi-command-injection_22444 https://github.com/runZeroInc/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12124.yaml
Related VulnerabilitiesWavlink WL-WN578W2跨站脚本漏洞(CVE-2026-4544)wavlink-router-live-api-cgi-rce: WavLink Router Live API cgi RCEPoCCVE-2020-10973: WAVLINK - Access ControlPoCCVE-2020-12124: WAVLINK WN530H4 live_api.cgi - Command InjectionPoCCVE-2020-12127: WAVLINK WN530H4 M30H4.V5030.190403 - Information DisclosurePoCCVE-2020-13117: Wavlink Multiple AP - Remote Command InjectionPoCCVE-2021-44260: WAVLINK AC1200 - Information DisclosurePoCCVE-2022-2486: Wavlink WN535K2/WN535K3 - OS Command InjectionPoCCVE-2022-2487: Wavlink WN535K2/WN535K3 - OS Command InjectionPoCCVE-2022-2488: Wavlink WN535K2/WN535K3 - OS Command InjectionPoCCVE-2022-30489: Wavlink WN-535G3 - Cross-Site ScriptingPoCCVE-2022-31845: WAVLINK WN535 G3 - Information DisclosurePoCCVE-2022-31846: WAVLINK WN535 G3 - Information Disclosure