Lucene search

JpcertCVE-2023-32621

HistoryJun 30, 2023 - 5:15 a.m.

CVE-2023-32621

2023-06-3005:15:09

CWE-434

jpcert

web.nvd.nist.gov

wl-wn531ax2

firmware

arbitrary file upload

os command execution

cve-2023-32621

nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.

Affected configurations

Nvd

Vulners

Node

wavlinkwl-wn531ax2_firmwareRange<2023526

AND

wavlinkwl-wn531ax2Match-

VendorProductVersionCPE
wavlinkwl-wn531ax2_firmware*cpe:2.3:o:wavlink:wl-wn531ax2_firmware:*:*:*:*:*:*:*:*
wavlinkwl-wn531ax2-cpe:2.3:h:wavlink:wl-wn531ax2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wavlink	wl-wn531ax2_firmware	*	cpe:2.3:o:wavlink:wl-wn531ax2_firmware::::::::
wavlink	wl-wn531ax2	-	cpe:2.3:h:wavlink:wl-wn531ax2:-:::::::*

CNA Affected

[
  {
    "vendor": "WAVLINK TECHNOLOGY Ltd.",
    "product": "WL-WN531AX2",
    "versions": [
      {
        "version": "firmware versions prior to 2023526",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

Related for CVE-2023-32621