Vulnerability Details CVE-2022-48166
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.714
EPSS Ranking 98.6%
CVSS Severity
CVSS v3 Score 7.5
References
- https://docs.google.com/document/d/1zvbuu3Hkk3CAkojAivlUESvtHblHJNLJdpGOoNtk-Vo/edit?usp=sharing
- https://github.com/strik3r0x1/Vulns/blob/main/WAVLINK%20WN530HG4.md
- https://docs.google.com/document/d/1zvbuu3Hkk3CAkojAivlUESvtHblHJNLJdpGOoNtk-Vo/edit?usp=sharing
- https://github.com/strik3r0x1/Vulns/blob/main/WAVLINK%20WN530HG4.md
Products affected by CVE-2022-48166
-
cpe:2.3:h:wavlink:wl-wn530hg4:-
-
cpe:2.3:o:wavlink:wl-wn530hg4_firmware:m30hg4.v5030.201217