Multiple external configuration control vulnerabilities exist in the nas.cgi set_nas() ProFTPD functionality of Wavlink AC3000 M33A8.V5030.210505. These vulnerabilities allow an authenticated attacker to bypass permissions by sending specially crafted HTTP requests. A configuration injection vulnerability is present in the ftp_name POST parameter. The CVSS score of 9.1 indicates critical severity.