CVE-2024-38666 | Wavlink AC3000 M33A8.V5030.210505 openvpn.cgi openvpn_client_setup external control of system or configuration setting (TALOS-2024-2051)
A vulnerability described as critical has been identified in Wavlink AC3000 M33A8.V5030.210505. The impacted element is the function openvpn_client_setup of the file openvpn.cgi. Executing manipulation can lead to external control of system or configuration setting.
This vulnerability is tracked as CVE-2024-38666. The attack can be launched remotely. No exploit exists.