CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32620

CVE-2023-32620 affects WAVLINK WL-WN531AX2 firmware prior to 2023526. The issue is an improper authentication vulnerability that enables a network-adjacent attacker to obtain the wireless network password. The root cause is insufficient authentication checks exposing credentials. Public discussio...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32613

CVE-2023-32613 affects WAVLINK WL-WN531AX2 firmware prior to 2023526. The issue is described as an exposure of a resource to the wrong sphere, potentially allowing a network-adjacent attacker to use functions that should require login without actually logging in. Mitigation based on the provided ...

CVE-2023-32613

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

CVE-2023-32612

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32612

Summary (CVE-2023-32612) WAVLINK WL-WN531AX2 firmware versions prior to 2023526 are affected by a client-side enforcement of a server-side security issue (CWE-602) that could allow a logged-in administrator to execute OS commands with root privileges. Impact: root-level command execution by privi...

WAVLINK WL-WN531AX2 License Issue Vulnerability

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. The WAVLINK WL-WN531AX2 suffers from an authorization issue vulnerability that stems from the presence of incorrect authentication issues, which can be exploited by an attacker to obtain a password for a wireless netwo...

PT-2023-23917 · Unknown · Wl-Wn531Ax2

Name of the Vulnerable Software and Affected Versions: WL-WN531AX2 firmware versions prior to 2023526 Description: The issue allows an attacker with administrative privilege to upload arbitrary files and execute OS commands with the root privilege. Recommendations: For WL-WN531AX2 firmware versio...

PT-2023-23911 · Unknown · Wl-Wn531Ax2

Name of the Vulnerable Software and Affected Versions: WL-WN531AX2 versions prior to 2023526 Description: The issue is related to the exposure of resources to the wrong sphere, potentially allowing a network-adjacent attacker to access functions that are originally available only after login,...

Multiple vulnerabilities in WAVLINK WL-WN531AX2

Overview WL-WN531AX2 provided by WAVLINK contains multiple vulnerabilities listed below. Client-side enforcement of server-side security CWE-602 - CVE-2023-32612 Exposure of resource to wrong sphere CWE-668 - CVE-2023-32613 Improper authentication CWE-287 - CVE-2023-32620 Unrestricted upload of...

WAVLINK WL-WN531AX2 授权问题漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. The WAVLINK WL-WN531AX2 suffers from an authorization issue vulnerability that stems from the presence of incorrect authentication issues, which can be exploited by an attacker to obtain a password for a wireless netwo...

WAVLINK WL-WN531AX2 安全漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WL-WN531AX2 versions prior to 2023526, which originates from allowing a logged in user to execute operating system commands with root privileges...

JVN#78634340: Multiple vulnerabilities in WAVLINK WL-WN531AX2

WL-WN531AX2 provided by WAVLINK contains multiple vulnerabilities listed below. Client-side enforcement of server-side security CWE-602 - CVE-2023-32612 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2| AV:A/AC:L/Au:S/C:C/I:C/A:C|...

WAVLINK WL-WN531AX2 安全漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WL-WN531AX2 versions prior to 2023526, which stems from a vulnerability that allows an unlogged-in attacker to use logged-in features...

WAVLINK WL-WN531AX2 安全漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WL-WN531AX2 versions prior to 2023526, which originates from a logged-in user being able to execute operating system commands with root privileges...

SUSE CVE-2019-9501

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlcwpasupeapol. In the worst case scenario, by sending specially-crafted WiFi packets, a remote,...

WAVLINK WL-WN533A8 Access Control Issue Vulnerability

WAVLINK WL-WN533A8 is a router from China's RuiYin Technology WAVLINK. The WAVLINK WL-WN533A8 suffers from an Access Control Issue vulnerability that originates from improper access control in the component /cgi-bin/ExportLogs.sh, which can be exploited by an attacker to download configuration da...