CVE-2022-2488 Scanner
Detects 'Command Injection' vulnerability in WAVLINK WN535K2 and WN535K3 affects v. Unknown.
Short Info
Level
Critical
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 second
Time Interval
1 month
Scan only one
Domain, Ipv4
Toolbox
-
WAVLINK WN535K2 and WN535K3 are wireless routers commonly utilized for home and small business network setups. These routers are popular due to their easy-to-use interface, dual-band support, and compatibility with various Internet Service Providers (ISPs). The WAVLINK WN535K2 and WN535K3 are designed to provide seamless internet connectivity and network management to their users.
Recently, a critical vulnerability named CVE-2022-2488 has been discovered in WAVLINK WN535K2 and WN535K3 routers. This vulnerability affects the file /cgi-bin/touchlist_sync.cgi and can lead to os command injection. This means that an attacker can remotely execute arbitrary commands within the router and take full control of the device. Cybercriminals can exploit such vulnerabilities to access sensitive information, infect connected devices with malware or launch DDoS attacks.
When exploited, CVE-2022-2488 can result in severe consequences for users of WAVLINK WN535K2 and WN535K3 routers. Attackers can gain unauthorized access to the network, and sensitive information such as login credentials, financial data, and personal information can be accessed. The exploit can also lead to a complete network outage, causing significant downtime and loss of revenue for businesses. In summary, CVE-2022-2488 vulnerability can seriously compromise the security and functionality of WAVLINK WN535K2 and WN535K3 routers.
Finally, at s4e.io, users can easily and quickly learn about vulnerabilities in their digital assets. Thanks to the pro features of our platform, users can leverage the expertise of our security professionals to create a security program that meets their unique needs. By subscribing to our platform, users can receive real-time alerts about new vulnerabilities and emerging threats, ensuring that they are always up-to-date on the latest security risks. Don't put your digital assets at risk any longer - join s4e.io today!
REFERENCES