Vulnerability Details CVE-2022-37149
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.1%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-37149
-
cpe:2.3:h:wavlink:wl-wn575a3:-
-
cpe:2.3:o:wavlink:wl-wn575a3_firmware:rpt75a3.v4300.201217