PT-2022-20680 · Wavlink · Wavlink Aerial X 1200M

Penwei Huang · Published 2022-06-14 · Updated 2023-08-08 · CVE-2022-31308

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WAVLINK AERIAL X 1200M version M79X3.V5030.191012

Description A vulnerability in the live mfg.shtml file allows attackers to obtain sensitive router information via execution of the exec cmd function.

Recommendations For version M79X3.V5030.191012, consider disabling the exec cmd function as a temporary workaround until a patch is available. Restrict access to the live mfg.shtml file to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-31308

Affected Products

Wavlink Aerial X 1200M

References · 4

• 🔥 https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20AC1200.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31308 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31308 · Vendor Advisory
• https://t.me/cibsecurity/44411 · Telegram Post