Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. An authenticated attacker can exploit the restart_min POST parameter via a specially crafted HTTP request to execute arbitrary code on the device. This vulnerability has a high severity CVSS score of 9.1.