CVE-2023-32622

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32612

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32613

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

CVE-2023-32613

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

Authentication flaw

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32622

The WAVLINK WL-WN531AX2 router is affected by CVE-2023-32622 (and related CVEs in the same advisory) for firmware versions prior to 2023526. The root cause is improper neutralization of special elements in the firmware, enabling an attacker with administrative privileges to execute OS commands wi...

CVE-2023-32622

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32621

Summary of CVE-2023-32621 (WAVLINK WL-WN531AX2): The vulnerability affects WL-WN531AX2 firmware versions prior to 2023526. It enables an administrator-authenticated context to upload arbitrary files and execute OS commands with root privileges, due to a file-upload vulnerability. The issue is doc...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620

CVE-2023-32620 affects WAVLINK WL-WN531AX2 firmware prior to 2023526. The issue is an improper authentication vulnerability that enables a network-adjacent attacker to obtain the wireless network password. The root cause is insufficient authentication checks exposing credentials. Public discussio...

CVE-2023-32613

CVE-2023-32613 affects WAVLINK WL-WN531AX2 firmware prior to 2023526. The issue is described as an exposure of a resource to the wrong sphere, potentially allowing a network-adjacent attacker to use functions that should require login without actually logging in. Mitigation based on the provided ...

CVE-2023-32613

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

CVE-2023-32612

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32612

Summary (CVE-2023-32612) WAVLINK WL-WN531AX2 firmware versions prior to 2023526 are affected by a client-side enforcement of a server-side security issue (CWE-602) that could allow a logged-in administrator to execute OS commands with root privileges. Impact: root-level command execution by privi...

PT-2023-23911 · Unknown · Wl-Wn531Ax2

Name of the Vulnerable Software and Affected Versions: WL-WN531AX2 versions prior to 2023526 Description: The issue is related to the exposure of resources to the wrong sphere, potentially allowing a network-adjacent attacker to access functions that are originally available only after login,...