Lucene search

K
cveMitreCVE-2022-44356
HistoryNov 29, 2022 - 5:15 p.m.

CVE-2022-44356

2022-11-2917:15:11
CWE-552
mitre
web.nvd.nist.gov
27
2
cve-2022-44356
wavlink
quantum d4g
wl-wn531g3
firmware
access control
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

59.2%

WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files.

Affected configurations

Nvd
Node
wavlinkwl-wn531g3Match-
AND
wavlinkwl-wn531g3_firmwareMatchm31g3.v5030.200325
OR
wavlinkwl-wn531g3_firmwareMatchm31g3.v5030.201204
VendorProductVersionCPE
wavlinkwl-wn531g3-cpe:2.3:h:wavlink:wl-wn531g3:-:*:*:*:*:*:*:*
wavlinkwl-wn531g3_firmwarem31g3.v5030.200325cpe:2.3:o:wavlink:wl-wn531g3_firmware:m31g3.v5030.200325:*:*:*:*:*:*:*
wavlinkwl-wn531g3_firmwarem31g3.v5030.201204cpe:2.3:o:wavlink:wl-wn531g3_firmware:m31g3.v5030.201204:*:*:*:*:*:*:*

Social References

More

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

59.2%

Related for CVE-2022-44356