CVE-2024-39795

Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.

• CWE-15

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2053Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2053

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3979A vulnerability, which was classified as problematic, has be…4.4
• CVE-2024-39790Multiple external config control vulnerabilities exist in th…7.2
• CVE-2024-39791Stack-based buffer overflow vulnerabilities affecting Vonets…9.8
• CVE-2024-39792When the NGINX Plus is configured to use the MQTT pre-read m…7.5
• CVE-2024-39793Multiple external config control vulnerabilities exist in th…7.2
• CVE-2024-39794Multiple external config control vulnerabilities exist in th…7.2
• CVE-2024-39797Improper access control in some drivers for Intel(R) Etherne…6.5
• CVE-2024-39798Multiple external config control vulnerabilities exists in t…7.2
• CVE-2024-39799Multiple external config control vulnerabilities exists in t…7.2
• CVE-2024-3980The MicroSCADA Pro/X SYS600 product allows an authenticated …8.8
• CVE-2024-39800Multiple external config control vulnerabilities exists in t…7.2
• CVE-2024-39801Multiple buffer overflow vulnerabilities exist in the qos.cg…7.2