What’s Vulnerable › Vulnerabilities

CVE-2021-44260

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-17 · updated 2026-06-17
• Weakness: CWE-306

Description

A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router.

Affected products

• Wavlink Wl-Wn531G3 Firmware: a42w-1.27.6-20180418

References

• https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_first.md
• https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_first.md

Get alerted when CVE-2021-44260 or the next vulnerability affects your stack