Advisories · Technology

Wavlink AC3000.

Every CVE that names Wavlink AC3000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-34166 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39363 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cross-site scripting in Wavlink AC3000
- Wavlink AC3000
- Cross-site scripting (XSS)
Not analysed yet 14 Jan 2025
CVE-2024-39761 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39760 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39759 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-36290 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39765 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39764 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39763 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39762 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39288 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39770 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39769 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39768 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39367 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39756 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-37184 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39294 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39358 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-21797 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Injection in Wavlink AC3000
- Wavlink AC3000
- Other injection
Not analysed yet 14 Jan 2025
CVE-2024-37357 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39774 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39370 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-37186 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39783 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39782 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39781 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39754 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Wavlink AC3000: A static login vulnerability exists in the wctrls functionality of Wavlink AC3000…
- Wavlink AC3000
- CWE-912
Not analysed yet 14 Jan 2025
CVE-2024-39773 CVE record

CVSS 5.3 Medium

Missing authentication in Wavlink AC3000
- Wavlink AC3000
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2024-39608 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in Wavlink AC3000
- Wavlink AC3000
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2024-39273 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Missing authentication in Wavlink AC3000
- Wavlink AC3000
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2024-39604 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Injection in Wavlink AC3000
- Wavlink AC3000
- Other injection
Not analysed yet 14 Jan 2025
CVE-2024-39357 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Stack-based buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39359 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Stack-based buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-36493 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Stack-based buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39603 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Stack-based buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39757 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Stack-based buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-34544 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Injection in Wavlink AC3000
- Wavlink AC3000
- Other injection
Not analysed yet 14 Jan 2025
CVE-2024-36272 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-36258 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Stack-based buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-36295 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Injection in Wavlink AC3000
- Wavlink AC3000
- Other injection
Not analysed yet 14 Jan 2025
CVE-2024-39299 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39803 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39802 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39801 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Buffer overflow in Wavlink AC3000
- Wavlink AC3000
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-39800 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exists in the openvpn.cgi…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39799 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exists in the openvpn.cgi…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39798 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exists in the openvpn.cgi…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-38666 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Wavlink AC3000: An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup()…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39602 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: An external config control vulnerability exists in the nas.cgi set_nas() functionality of…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39795 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39794 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39793 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39360 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Command injection in Wavlink AC3000
- Wavlink AC3000
- Command injection
Not analysed yet 14 Jan 2025
CVE-2024-39280 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Wavlink AC3000: An external config control vulnerability exists in the nas.cgi set_smb_cfg()…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39790 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg()…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39789 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg()…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39788 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Wavlink AC3000: Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg()…
- Wavlink AC3000
- CWE-15
Not analysed yet 14 Jan 2025
CVE-2024-39787 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Wavlink AC3000
- Wavlink AC3000
- Path traversal
Not analysed yet 14 Jan 2025
CVE-2024-39786 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Wavlink AC3000
- Wavlink AC3000
- Path traversal
Not analysed yet 14 Jan 2025