Improper Authentication in WL-WN531AX2 Firmware by Wavlink
CVE-2023-32620

6.5MEDIUM

Key Information:

Vendor: Wavlink Technology Ltd.
Status: Wl-wn531ax2
Vendor: CVE Published:; 30 June 2023

🔔 Create Wavlink Technology Ltd. Vulnerability Alert

What is CVE-2023-32620?

The WL-WN531AX2 firmware from Wavlink contains an improper authentication vulnerability that affects versions released before 2023526. This flaw enables an adjacent network attacker to retrieve sensitive information such as the wireless network password, posing a significant risk to network security. Users of the affected firmware versions are strongly advised to update to the latest version to mitigate this vulnerability.

Affected Version(s)

WL-WN531AX2 firmware versions prior to 2023526

References

https://www.wavlink.com/en_us/firmware/details/932108ffc5...

https://jvn.jp/en/jp/JVN78634340/

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 30, 2023
Vulnerability Reserved
May 11, 2023

CVE-2023-32620 Data

JSON