CVE-2024-48705 | Wavlink AC1200 M32A3_V1410_230602/M32A3_V1410_240222 adm.cgi set_sys_adm newpass command injection

A vulnerability labeled as critical has been found in Wavlink AC1200 M32A3_V1410_230602/M32A3_V1410_240222. Impacted is the function set_sys_adm of the file adm.cgi. The manipulation of the argument newpass results in command injection.

This vulnerability is identified as CVE-2024-48705. The attack can be executed remotely. There is not any exploit available.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.