Lucene search

K
cve[email protected]CVE-2022-48165
HistoryFeb 03, 2023 - 9:15 p.m.

CVE-2022-48165

2023-02-0321:15:10
web.nvd.nist.gov
23
cve-2022-48165
access control issue
wavlink wl-wn530h4
unauthenticated attackers
admin credentials
configuration data
log files
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.4%

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.

Affected configurations

NVD
Node
wavlinkwl-wn530h4_firmwareMatchm30h4.v5030.210121
AND
wavlinkwl-wn530h4Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.4%

Related for CVE-2022-48165