Unscored CVE-2023-32622 EUVD-2023-36865GHSA-84c9-8v7x-vgqf

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative pri…

Published Jun 30, 2023 · Updated Dec 4, 2024 · Assigned by jpcert

Description

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.

Affected products

Vendor	Product	Affected	Fixed
WAVLINK TECHNOLOGY	WL-WN531AX2	firmware versions prior to 2023526	—

References

https://www.wavlink.com/en_us/firmware/details/932108ffc5.html
https://jvn.jp/en/jp/JVN78634340/