Unauthorized Access in WAVLINK AC1200 Router by WAVLINK
CVE-2021-44259

9.8CRITICAL

Key Information:

Vendor

Wavlink

Status
Wl-wn531g3 Firmware
Vendor
CVE Published:
17 March 2022

What is CVE-2021-44259?

The WAVLINK AC1200 router contains a vulnerability in the 'wx.html' page that permits remote attackers to gain access to the device without any authentication. When unauthorized users access this page directly, they can interact with the device as if they were a friend of the device owner, potentially compromising network security.

References

https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.