CVE-2024-39754

CRITICAL

Wavlink AC3000 M33A8.V5030.210505 - RCE

Title source: llm

Description

A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.

References (2)

Scores

CVSS v3 10.0
EPSS 0.0033
EPSS Percentile 55.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Classification

CWE
CWE-912
Status published

Affected Products (1)

wavlink/wl-wn533a8_firmware

Timeline

Published Jan 14, 2025
Tracked Since Feb 18, 2026