Design/Logic Flaw

2023-06-3005:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

firmware

os commands

administrative privilege

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

JSON

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.

CPENameOperatorVersion
wl-wn531ax2_firmwarelt2023526

CPE	Name	Operator	Version
	wl-wn531ax2_firmware	lt	2023526

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html