CVE-2024-39788 is a critical vulnerability in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. It involves multiple external configuration control flaws, including a configuration injection via the ftp_name POST parameter. An authenticated attacker can exploit these flaws through specially crafted HTTP requests to bypass permissions, potentially leading to full compromise of confidentiality, integrity, and availability.