Resource Exposure Vulnerability in WL-WN531AX2 Firmware by Wavlink
CVE-2023-32613

8.1HIGH

Key Information:

Vendor

Wavlink Technology Ltd.

Status
Wl-wn531ax2
Vendor
CVE Published:
30 June 2023

What is CVE-2023-32613?

The WL-WN531AX2 firmware prior to version 2023526 contains a vulnerability that allows a network-adjacent attacker to access functions that should be restricted to authenticated users. This exposure could lead to unauthorized actions within the network, posing significant security risks. It is crucial for users to update their firmware promptly to mitigate potential threats.

Affected Version(s)

WL-WN531AX2 firmware versions prior to 2023526

References

https://www.wavlink.com/en_us/firmware/details/932108ffc5...
https://jvn.jp/en/jp/JVN78634340/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.