Wavlink Ac3000 vulnerabilities

CVE-2024-39774 [HIGH] CWE-120 CVE-2024-39774: A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2024-39773 [MEDIUM] CWE-306 CVE-2024-39773: An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M3 An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.