Vulnerability Details CVE-2024-39754
A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.9%
CVSS Severity
CVSS v3 Score 10.0
References
Products affected by CVE-2024-39754
-
cpe:2.3:h:wavlink:wl-wn533a8:-
-
cpe:2.3:o:wavlink:wl-wn533a8_firmware:m33a8.v5030.210505