CVE-2024-39773 MEDIUM

CVE-2024-39773

Vendor Wavlink

Product Wavlink AC3000

Weakness CWE-306 · Missing auth

Published January 14, 2025

Last update January 14, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

Key dates

02Disclosure timeline

January 14, 2025 CVE published

January 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-39773 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

04Related CVE

CVE-2022-1368 Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function CVE-2022-1388 CVE-2025-10452 Gotac｜Statistical Database System - Missing Authentication CVE-2025-12349 Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger CVE-2022-20830 Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability