Lucene search

JpcertCVELIST:CVE-2023-32621

HistoryJun 30, 2023 - 4:03 a.m.

CVE-2023-32621

2023-06-3004:03:36

jpcert

www.cve.org

cve-2023-32621

wl-wn531ax2

firmware

arbitrary files

os commands

privilege escalation

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.

CNA Affected

[
  {
    "vendor": "WAVLINK TECHNOLOGY Ltd.",
    "product": "WL-WN531AX2",
    "versions": [
      {
        "version": "firmware versions prior to 2023526",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html