PT-2023-23917 · Unknown · Wl-Wn531Ax2

Name of the Vulnerable Software and Affected Versions: WL-WN531AX2 firmware versions prior to 2023526 Description: The issue allows an attacker with administrative privilege to upload arbitrary files and execute OS commands with the root privilege. Recommendations: For WL-WN531AX2 firmware versio...

WAVLINK WL-WN531AX2 License Issue Vulnerability

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. The WAVLINK WL-WN531AX2 suffers from an authorization issue vulnerability that stems from the presence of incorrect authentication issues, which can be exploited by an attacker to obtain a password for a wireless netwo...

Multiple vulnerabilities in WAVLINK WL-WN531AX2

Overview WL-WN531AX2 provided by WAVLINK contains multiple vulnerabilities listed below. Client-side enforcement of server-side security CWE-602 - CVE-2023-32612 Exposure of resource to wrong sphere CWE-668 - CVE-2023-32613 Improper authentication CWE-287 - CVE-2023-32620 Unrestricted upload of...

WAVLINK WL-WN531AX2 安全漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WL-WN531AX2 versions prior to 2023526, which stems from a vulnerability that allows an unlogged-in attacker to use logged-in features...

WAVLINK WL-WN531AX2 安全漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WL-WN531AX2 versions prior to 2023526, which originates from a logged-in user being able to execute operating system commands with root privileges...

JVN#78634340: Multiple vulnerabilities in WAVLINK WL-WN531AX2

WL-WN531AX2 provided by WAVLINK contains multiple vulnerabilities listed below. Client-side enforcement of server-side security CWE-602 - CVE-2023-32612 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2| AV:A/AC:L/Au:S/C:C/I:C/A:C|...

WAVLINK WL-WN531AX2 安全漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WL-WN531AX2 versions prior to 2023526, which originates from allowing a logged in user to execute operating system commands with root privileges...

WAVLINK WL-WN531AX2 授权问题漏洞

The WAVLINK WL-WN531AX2 is a wireless router from the Chinese company WAVLINK. The WAVLINK WL-WN531AX2 suffers from an authorization issue vulnerability that stems from the presence of incorrect authentication issues, which can be exploited by an attacker to obtain a password for a wireless netwo...

SUSE CVE-2019-9501

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlcwpasupeapol. In the worst case scenario, by sending specially-crafted WiFi packets, a remote,...

WAVLINK WL-WN533A8 Access Control Issue Vulnerability

WAVLINK WL-WN533A8 is a router from China's RuiYin Technology WAVLINK. The WAVLINK WL-WN533A8 suffers from an Access Control Issue vulnerability that originates from improper access control in the component /cgi-bin/ExportLogs.sh, which can be exploited by an attacker to download configuration da...

CVE-2022-48166

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

CVE-2022-48166

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

Design/Logic Flaw

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

CVE-2022-48164

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

Design/Logic Flaw

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

CVE-2022-48164

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

CVE-2022-48164

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

CVE-2022-48166

Wavlink WL-WN530HG4 M30HG4.V5030.201217 is affected by an access-control flaw that allows unauthenticated attackers to download device configuration data, log files, and admin credentials. The issue is an information-disclosure vulnerability in the product’s admin interface, as described by multi...

CVE-2022-48164

CVE-2022-48164 affects the Wavlink WL-WN533A8 family (M33A8.V5030.190716). The issue is an access-control flaw in the /cgi-bin/ExportLogs.sh component that allows unauthenticated attackers to download configuration data, log files, and obtain admin credentials. CVSS v3.1 base score 7.5 (HIGH) wit...

WAVLINK WL-WN530HG4 安全漏洞

WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK WL-WN530HG4 M30HG4.V5030.201217 version, which stems from an access control issue that allows an unauthenticated attacker to download configuration data a...