OS Command Injection Vulnerability in WL-WN531AX2 Firmware by Wavlink
CVE-2023-32622

7.2HIGH

Key Information:

Vendor: Wavlink Technology Ltd.
Status: Wl-wn531ax2
Vendor: CVE Published:; 30 June 2023

🔔 Create Wavlink Technology Ltd. Vulnerability Alert

What is CVE-2023-32622?

The WL-WN531AX2 firmware versions prior to 2023526 are susceptible to an OS command injection vulnerability due to improper sanitization of input. An attacker with administrative privileges can exploit this flaw to execute arbitrary OS commands, potentially compromising the affected system's integrity and exposing sensitive data.

Affected Version(s)

WL-WN531AX2 firmware versions prior to 2023526

References

https://www.wavlink.com/en_us/firmware/details/932108ffc5...

https://jvn.jp/en/jp/JVN78634340/

CVSS V3.1

Score:

7.2

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 30, 2023
Vulnerability Reserved
May 11, 2023

CVE-2023-32622 Data

JSON