← Back to browse · API

CVE-2024-39754

Severity
CRITICAL
CVSS
10.0
EPSS
0.01304
Risk score
40.46
CISA KEV
No
PoC
No
Published
2025-01-14
Modified
2025-01-14
First seen
2026-08-07
Aliases
EUVD-2024-38370, GHSA-9CH8-4327-G6CW
Products
WAVLINK:Wavlink AC3000 M33A8.V5030.210505
Sources
euvd EUVD-2024-38370

Description

A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.

References