CVE-2023-32612

2023-06-3004:01:42

jpcert

www.cve.org

client-side security

server-side security

administrative privilege

os commands

root privilege

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege.

CNA Affected

[
  {
    "vendor": "WAVLINK TECHNOLOGY Ltd.",
    "product": "WL-WN531AX2",
    "versions": [
      {
        "version": "firmware versions prior to 2023526",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html