CVE-2022-44356

2022-11-2917:15:11

CWE-552

[email protected]

web.nvd.nist.gov

wavlink quantum d4g

wl-wn531g3

firmware

access control issue

unauthenticated attackers

configuration data

log files

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

59.2%

JSON

WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files.

Affected configurations

Nvd

Node

wavlinkwl-wn531g3Match-

AND

wavlinkwl-wn531g3_firmwareMatchm31g3.v5030.200325

wavlinkwl-wn531g3_firmwareMatchm31g3.v5030.201204

VendorProductVersionCPE
wavlinkwl-wn531g3-cpe:2.3:h:wavlink:wl-wn531g3:-:*:*:*:*:*:*:*
wavlinkwl-wn531g3_firmwarem31g3.v5030.200325cpe:2.3:o:wavlink:wl-wn531g3_firmware:m31g3.v5030.200325:*:*:*:*:*:*:*
wavlinkwl-wn531g3_firmwarem31g3.v5030.201204cpe:2.3:o:wavlink:wl-wn531g3_firmware:m31g3.v5030.201204:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wavlink	wl-wn531g3	-	cpe:2.3:h:wavlink:wl-wn531g3:-:::::::*
wavlink	wl-wn531g3_firmware	m31g3.v5030.200325	cpe:2.3:o:wavlink:wl-wn531g3_firmware:m31g3.v5030.200325:::::::*
wavlink	wl-wn531g3_firmware	m31g3.v5030.201204	cpe:2.3:o:wavlink:wl-wn531g3_firmware:m31g3.v5030.201204:::::::*