WAVLINK Quantum D4G (WN531G3) Session Management by IP Address
CVE-2022-40622

8.8HIGH

Key Information:

Vendor

Wavlink

Status
Wn531g3
Vendor
CVE Published:
13 September 2022

What is CVE-2022-40622?

The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.

Affected Version(s)

WN531G3 M31G3.V5030.200325

References

https://youtu.be/cSileV8YbsQ?t=655
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Corey Hartman
.