Lucene search

JpcertCVELIST:CVE-2023-32622

HistoryJun 30, 2023 - 4:04 a.m.

CVE-2023-32622

2023-06-3004:04:04

jpcert

www.cve.org

vulnerability

firmware

privilege escalation

os commands

root privilege

administrative access

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.

CNA Affected

[
  {
    "vendor": "WAVLINK TECHNOLOGY Ltd.",
    "product": "WL-WN531AX2",
    "versions": [
      {
        "version": "firmware versions prior to 2023526",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html