Lucene search
Rapid7CVELIST:CVE-2022-40623HistorySep 13, 2022 - 8:35 p.m.
CVE-2022-40623 WAVLINK Quantum D4G (WN531G3) CSRF
2022-09-1320:35:13
CWE-352
rapid7
www.cve.org
4
wavlink
quantum d4g
csrf
vulnerability
firmware
version
remote
unauthenticated
command execution
cve-2022-40623
cve-2022-35518
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.
CNA Affected
[
{
"product": "WN531G3",
"vendor": "WAVLINK",
"versions": [
{
"lessThanOrEqual": "M31G3.V5030.200325",
"status": "affected",
"version": "M31G3.V5030.200325",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Cross site request forgery (csrf)
2022-09-13 21:15:00
Command injection
2022-08-10 20:15:00
nvd
nvd
CVE-2022-40623
2022-09-13 21:15:10
CVE-2022-35518
2022-08-10 20:15:54
cve
cve
CVE-2022-40623
2022-09-13 21:15:10
CVE-2022-35518
2022-08-10 20:15:54
cvelist
cvelist
CVE-2022-35518
2022-08-09 19:56:01