CVE-2023-3380

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-74

• https://github.com/sleepyvv/vul_report/blob/main/WAVLINK/WAVLINK-WN579X3-RCE.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232236Permissions Required, Third Party Advisory
• https://vuldb.com/?id.232236Third Party Advisory
• https://github.com/sleepyvv/vul_report/blob/main/WAVLINK/WAVLINK-WN579X3-RCE.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232236Permissions Required, Third Party Advisory
• https://vuldb.com/?id.232236Third Party Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33794A stored cross-site scripting (XSS) vulnerability in the Cre…5.4
• CVE-2023-33795A stored cross-site scripting (XSS) vulnerability in the Cre…5.4
• CVE-2023-33796A vulnerability in Netbox v3.5.1 allows unauthenticated atta…9.1
• CVE-2023-33797A stored cross-site scripting (XSS) vulnerability in the Cre…5.4
• CVE-2023-33798A stored cross-site scripting (XSS) vulnerability in the Cre…5.4
• CVE-2023-33799A stored cross-site scripting (XSS) vulnerability in the Cre…5.4
• CVE-2023-33800A stored cross-site scripting (XSS) vulnerability in the Cre…5.4
• CVE-2023-33802A buffer overflow in SumatraPDF Reader v3.4.6 allows attacke…5.5
• CVE-2023-33806Insecure default configurations in Hikvision Interactive Tab…7.8
• CVE-2023-3381A vulnerability classified as problematic was found in Sourc…6.1
• CVE-2023-33817hoteldruid v3.0.5 was discovered to contain a SQL injection …8.8
• CVE-2023-3382A vulnerability, which was classified as problematic, has be…6.1