Code injection

2023-06-3005:15:00

PRIOn knowledge base

www.prio-n.com

code injection

network-adjacent

firmware vulnerability

unauthorized access

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in.

CPENameOperatorVersion
wl-wn531ax2_firmwarelt2023526

CPE	Name	Operator	Version
	wl-wn531ax2_firmware	lt	2023526

References

jvn.jp/en/jp/JVN78634340/

www.wavlink.com/en_us/firmware/details/932108ffc5.html