Description

A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.

Related CPE's

o

wavlink

wn535g3_firmware

m35g3r.v5030.180927

Vulnerable

h

wavlink

wn535g3

-

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30489

Not Applicable

https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN535%20G3__live_mfg.md

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-668

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-06-14T14:15:08.177

3 years ago

Last modified

2022-06-23T17:14:03.177

3 years ago