Wn531g3 Firmware vulnerabilities

3 known vulnerabilities in Wn531g3 Firmware from WAVLINK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WN531G3: Cross-Site Request Forgery

  CVE-2022-40623Sep 13, 2022WAVLINK

  The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.

• 8.8 High severity

  WN531G3: Improper Authentication

  CVE-2022-40622Sep 13, 2022WAVLINK

  The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the sa

• 7.5 High severity

  WN531G3: Authentication Bypass by Capture-replay

  CVE-2022-40621Sep 13, 2022WAVLINK

  Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient net