Lucene search

JpcertCVE-2023-32612

HistoryJun 30, 2023 - 5:15 a.m.

CVE-2023-32612

2023-06-3005:15:09

jpcert

web.nvd.nist.gov

cve-2023-32612

security issue

wl-wn531ax2

firmware

admin privilege

os command execution

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege.

Affected configurations

Nvd

Vulners

Node

wavlinkwl-wn531ax2Match-

AND

wavlinkwl-wn531ax2_firmwareRange<2023526

VendorProductVersionCPE
wavlinkwl-wn531ax2-cpe:2.3:h:wavlink:wl-wn531ax2:-:*:*:*:*:*:*:*
wavlinkwl-wn531ax2_firmware*cpe:2.3:o:wavlink:wl-wn531ax2_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wavlink	wl-wn531ax2	-	cpe:2.3:h:wavlink:wl-wn531ax2:-:::::::*
wavlink	wl-wn531ax2_firmware	*	cpe:2.3:o:wavlink:wl-wn531ax2_firmware::::::::

CNA Affected

[
  {
    "vendor": "WAVLINK TECHNOLOGY Ltd.",
    "product": "WL-WN531AX2",
    "versions": [
      {
        "version": "firmware versions prior to 2023526",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

Related for CVE-2023-32612