CVE-2024-39773

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-39773
An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2024-2035 Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2035 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:wavlink:wl-wn533a8_firmware:m33a8.v5030.210505:*:*:*:*:*:*:*
cpe:2.3:h:wavlink:wl-wn533a8:-:*:*:*:*:*:*:*
History

22 Aug 2025, 14:04

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de divulgación de información en la función testsave.sh de Wavlink AC3000 M33A8.V5030.210505. Una solicitud HTTP manipulada especialmente puede provocar la divulgación de información confidencial. Un atacante puede enviar una solicitud HTTP para activar esta vulnerabilidad.
CPE cpe:2.3:o:wavlink:wl-wn533a8_firmware:m33a8.v5030.210505:*:*:*:*:*:*:*
cpe:2.3:h:wavlink:wl-wn533a8:-:*:*:*:*:*:*:*
First Time Wavlink wl-wn533a8 Firmware
Wavlink wl-wn533a8
Wavlink
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2035 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2035 - Exploit, Third Party Advisory
References () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2035 - () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2035 - Exploit, Third Party Advisory

14 Jan 2025, 16:15

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2035 -

14 Jan 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-14 15:15

Updated : 2025-08-22 14:04

NVD link : CVE-2024-39773

Mitre link : CVE-2024-39773

CVE.ORG link : CVE-2024-39773

JSON object : View

Products Affected

wavlink

  • wl-wn533a8_firmware
  • wl-wn533a8
CWE
CWE-306

Missing Authentication for Critical Function