PT-2023-15597
CVE-2022-48164
·
تاريخ النشر
2023-02-06
·
تاريخ التحديث
2025-03-26
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Wavlink WL-WN533A8 version M33A8.V5030.190716
Description
An access control issue in the component /cgi-bin/ExportLogs.sh allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.
Recommendations
For version M33A8.V5030.190716, consider restricting access to the /cgi-bin/ExportLogs.sh component to prevent unauthenticated downloads of sensitive data. As a temporary workaround, consider disabling the ExportLogs.sh functionality until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾