CVE-2022-48164

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN533A8 version M33A8.V5030.190716

Description An access control issue in the component /cgi-bin/ExportLogs.sh allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.

Recommendations For version M33A8.V5030.190716, consider restricting access to the /cgi-bin/ExportLogs.sh component to prevent unauthenticated downloads of sensitive data. As a temporary workaround, consider disabling the ExportLogs.sh functionality until a patch is available.