Lucene search
HistoryJun 30, 2023 - 5:15 a.m.
CVE-2023-32620
improper authentication
firmware version
network-adjacent attacker
wireless network
password
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
24.0%
Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network.
Affected configurations
Node
wavlinkwl-wn531ax2_firmwareRange<2023526
wavlinkwl-wn531ax2Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wavlink | wl-wn531ax2_firmware | * | cpe:2.3:o:wavlink:wl-wn531ax2_firmware:*:*:*:*:*:*:*:* |
| wavlink | wl-wn531ax2 | - | cpe:2.3:h:wavlink:wl-wn531ax2:-:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2023-06-30 05:15:00
cve
cve
CVE-2023-32620
2023-06-30 05:15:09
cvelist
cvelist
CVE-2023-32620
2023-06-30 04:02:54
jvn
jvn
JVN#78634340: Multiple vulnerabilities in WAVLINK WL-WN531AX2
2023-06-27 00:00:00
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
24.0%
Related for NVD:CVE-2023-32620