CVE-2024-34166

An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-77

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2000Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2000Exploit, Third Party Advisory

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3416A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2024-34161When NGINX Plus or NGINX OSS are configured to use the HTTP/…5.3
• CVE-2024-34162The web interface of the affected devices is designed to hid…5.3
• CVE-2024-34163Improper input validation in firmware for some Intel(R) NUC …8.2
• CVE-2024-34164Uncontrolled search path element in some Intel(R) MAS softwa…6.7
• CVE-2024-34165Uncontrolled search path in some Intel(R) oneAPI DPC++/C++ C…6.7
• CVE-2024-34167Uncontrolled search path for the Intel(R) Server Board S2600…6.7
• CVE-2024-3417A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-34170Improper buffer restrictions in some Intel(R) Graphics Drive…6.9
• CVE-2024-34171Fuji Electric Monitouch V-SFT is vulnerable to a stack-base…9.8
• CVE-2024-3418A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-3419A vulnerability has been found in SourceCodester Online Cour…9.8