wavlink wl-wn575a3 firmware

Name: wavlink wl-wn575a3 firmware
Brand: wavlink

productUS

cpe:2.3:o:wavlink:wl-wn575a3_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical3high0medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-25528US	—	3.92% (90th)	—	no fix	2025-02-11	= rpt75a3.v4300
CVE-2022-34592US	critical9.8	3.28% (88th)	—	no fix	2022-07-07	= rpt75a3.v4300.201217
CVE-2022-37149US	critical9.8	2.75% (86th)	—	no fix	2022-08-30	= rpt75a3.v4300.201217
CVE-2020-10971US	high8.8	2.73% (86th)	—	no fix	2020-05-07	= rpt75a3.v4300.180801
CVE-2020-12266US	high7.5OT elevated	1.76% (78th)	—	no fix	2020-04-27	= rpt75a3.v4300.180801
CVE-2020-10974US	high7.5OT elevated	1.69% (77th)	—	no fix	2020-05-07	= rpt75a3.v4300.180801
CVE-2023-38861US	critical9.8	1.64% (76th)	—	no fix	2023-08-15	= r75a3_v1410_220513

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.