1. Home
  2. CVE Database
  3. CVE-2024-10193
MEDIUM · 4.7

CVE-2024-10193

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function ping_ddns of the file internet.cgi. The manipulation of t...

Vulnerability Description

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function ping_ddns of the file internet.cgi. The manipulation of the argument DDNS leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Score

4.7

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
WavlinkWn530H4 Firmware<= 20221028
WavlinkWn530H4-
WavlinkWn530Hg4 Firmware<= 20221028
WavlinkWn530Hg4-
WavlinkWn572Hg3 Firmware<= 20221028
WavlinkWn572Hg3-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2024-10193?

CVE-2024-10193 is a vulnerability with a CVSS score of 4.7 (MEDIUM). A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function ping_ddns of the file internet.cgi. The manipulation of t...

How severe is CVE-2024-10193?

CVE-2024-10193 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-10193?

Check the references section above for vendor advisories and patch information. Affected products include: Wavlink Wn530H4 Firmware, Wavlink Wn530H4, Wavlink Wn530Hg4 Firmware, Wavlink Wn530Hg4, Wavlink Wn572Hg3 Firmware.