Wl-wn530hg4 Firmware vulnerabilities

3 known vulnerabilities in Wl-wn530hg4 Firmware from WAVLINK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Wl-wn530hg4 Firmware: Missing Authorization

  CVE-2022-48166Feb 6, 2023WAVLINKEPSS 2.82%

  An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.

• 7.5 High severity

  Wl-wn530hg4 Firmware: Exposure of Resource to Wrong Sphere

  CVE-2022-34047Jul 20, 2022WAVLINKEPSS 22.2%

  An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd].

• 9.8 Critical severity

  Wl-wn530hg4 Firmware: Use of Hard-coded Credentials

  CVE-2022-34045Jul 20, 2022WAVLINKEPSS 3.36%

  Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.