wavelog vulnerabilities and fixes

Recent CVEs affecting wavelog, with upgrade or downgrade steps. 4 tracked.

wavelog has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-10-14. Highest priority: CVE-2024-48257 (score 57/100).

• CVE-2024-8521 MEDIUM 4.3 UPGRADE A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0
• CVE-2024-48257 CRITICAL 9.8 DOWNGRADE Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.
• CVE-2024-48251 CRITICAL 9.8 DOWNGRADE Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation,
• CVE-2024-48249 HIGH 7.3 DOWNGRADE Wavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.

FAQ

How do I fix wavelog vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wavelog being exploited right now?

None of the tracked wavelog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wavelog CVE should I patch first?

CVE-2024-48257 currently ranks highest (57/100): Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin..

RSS feed for wavelog · ← Back to latest CVEs