Lucene search

K
nvd[email protected]NVD:CVE-2023-32622
HistoryJun 30, 2023 - 5:15 a.m.

CVE-2023-32622

2023-06-3005:15:09
web.nvd.nist.gov
cve-2023-32622
firmware
privilege escalation
os commands
administrative privilege

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.

Affected configurations

NVD
Node
wavlinkwl-wn531ax2_firmwareRange<2023526
AND
wavlinkwl-wn531ax2Match-

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

Related for NVD:CVE-2023-32622