CVE-2022-40623

Published: Sep 13, 2022

Modified: Sep 17, 2024

PUBLISHED

Description

The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.

Vendor	Product	Versions
WAVLINK	WN531G3	affected `M31G3.V5030.200325 - <= M31G3.V5030.200325`

Weaknesses (CWE)

CWE-352

References

https://youtu.be/cSileV8YbsQ?t=1028

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-40623

Description

Affected Products

Weaknesses (CWE)

References