Update CVE-2022-2486.yaml

patch-1
林寒 2022-07-21 02:34:27 +08:00 committed by GitHub
parent 50ed4b9214
commit 2ac748ecb0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -4,7 +4,7 @@ info:
name: Wavlink Mesh.cgi - RCE
author: For3stCo1d
severity: critical
description: |
description: |
A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used.
reference:
- https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20mesh.cgi.md