Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_port` POST parameter.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
系统设置或配置在外部可控制
Vulnerability Title
WAVLINK AC3000 安全漏洞
Vulnerability Description
WAVLINK AC3000是中国睿因（WAVLINK）公司的一个无线路由器。 WAVLINK AC3000 M33A8.V5030.210505版本存在安全漏洞，该漏洞源于包含多个外部配置控制漏洞。
CVSS Information
N/A
Vulnerability Type
N/A