CVE-2023-32622

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-32622

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

mproper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.

References
Link Resource
https://jvn.jp/en/jp/JVN78634340/ Patch Third Party Advisory
https://www.wavlink.com/en_us/firmware/details/932108ffc5.html Patch Product
https://jvn.jp/en/jp/JVN78634340/ Patch Third Party Advisory
https://www.wavlink.com/en_us/firmware/details/932108ffc5.html Patch Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:wavlink:wl-wn531ax2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:wavlink:wl-wn531ax2:-:*:*:*:*:*:*:*
History

04 Dec 2024, 16:15

Type Values Removed Values Added
CWE CWE-78

21 Nov 2024, 08:03

Type Values Removed Values Added
References () https://jvn.jp/en/jp/JVN78634340/ - Patch, Third Party Advisory () https://jvn.jp/en/jp/JVN78634340/ - Patch, Third Party Advisory
References () https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - Patch, Product () https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - Patch, Product
Information

Published : 2023-06-30 05:15

Updated : 2024-12-04 16:15

NVD link : CVE-2023-32622

Mitre link : CVE-2023-32622

CVE.ORG link : CVE-2023-32622

JSON object : View

Products Affected

wavlink

CWE
NVD-CWE-Other CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')