Volerion logoVolerion
Volerion logoVolerion

Wavlink WN535K3 Command Injection Vulnerability in set_sys_adm Function

Vulnerability

A command injection vulnerability has been identified in the Wavlink WN535K3 router, specifically in the firmware version 20191010. The issue arises in the set_sys_adm function, where the newpass parameter can be manipulated to execute arbitrary commands via a crafted request.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Added: Jul 14, 2025, 3:19 PM
Updated: Jul 14, 2025, 3:19 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
7.5
exploitability
9.1
remediation
0.0
relevance
0.3
threat
6.6
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.