Wavlink Vulnerabilities

This vulnerability allows an attacker to execute cross-site scripting (XSS) attacks remotely by manipulating the Hostname argument in the device's firmware. To exploit this, the attacker needs to send a specially crafted request to the affected device, which can lead to unauthorized actions or data theft from users interacting with the device.

An attacker can remotely exploit a vulnerability in the Wavlink WL-WN579X3-C firmware to execute arbitrary code on the device by manipulating a specific setting, which could lead to full control over the device. To protect against this risk, users should upgrade to the latest firmware version as soon as possible.

An attacker can remotely execute commands on the Wavlink WL-NU516U1 device by manipulating a specific setting in its firmware. This vulnerability requires no special access, making it a significant risk for anyone using this device.

An attacker can remotely execute arbitrary commands on the Wavlink WL-NU516U1 device due to a flaw in its firmware that allows them to manipulate a specific function. This vulnerability requires no special access, making it relatively easy for an attacker to exploit if they know how.

An attacker can remotely execute malicious commands on the Wavlink WL-NU516U1 device by exploiting a flaw in its firewall settings. This vulnerability can be triggered by manipulating a specific input, and it affects devices with firmware versions up to December 8, 2025.

This vulnerability allows an attacker to remotely crash the Wavlink WL-NU516U1 device or potentially take control of it by exploiting a flaw in how the device handles time zone settings. Although the attack is complex and difficult to execute, public exploit code is available, making it a real threat to unpatched devices.

This vulnerability allows an attacker to remotely execute commands on the Wavlink WL-WN579A3 router by manipulating a specific setting in its firmware. It affects devices running firmware versions up to February 19, 2021, and can be exploited without needing physical access to the device.

An attacker can remotely execute commands on the Wavlink WL-WN579A3 router by exploiting a flaw in the firmware that allows them to manipulate a specific setting. This vulnerability affects devices running firmware versions up to February 19, 2021, and requires the attacker to send specially crafted requests to the router.

This vulnerability allows an attacker to remotely execute arbitrary commands on the Wavlink WL-WN579A3 router by manipulating a specific function in its firmware. The issue affects devices running firmware versions up to February 19, 2021, and exploits are publicly available, making it relatively easy for attackers to take advantage of this flaw.

An attacker can remotely execute arbitrary commands on the Wavlink WL-WN579A3 router by manipulating a specific part of the login process. This vulnerability affects devices with firmware versions up to February 19, 2021, and it has been publicly disclosed, meaning that anyone can potentially exploit it.

An attacker can remotely execute arbitrary commands on the Wavlink WL-WN579A3 router by manipulating a specific setting related to its wireless network configuration. This vulnerability affects devices running firmware versions up to February 19, 2021, and the vendor has not responded to reports about the issue.