PT-2024-36410 · Wavlink · Wavlink Wn701Ae

Published 2024-12-06 · Updated 2025-10-03 · CVE-2024-54745

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WAVLINK WN701AE version M01AE V240305

Description A hardcoded password vulnerability was discovered in the /etc/shadow file, allowing attackers to log in as the root user. This issue enables unauthorized access to the system with superuser privileges.

Recommendations For WAVLINK WN701AE version M01AE V240305, consider changing the hardcoded password in the /etc/shadow file to a unique and secure password to prevent unauthorized access. As a temporary workaround, restrict access to the device until a patch is available.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2026-00817

CVE-2024-54745

Affected Products

Wavlink Wn701Ae

References · 9

• 🔥 https://colorful-meadow-5b9.notion.site/WN701AE_HardCode_vuln-14ac216a1c308015b571e68810d83e16?pvs=4 · Exploit
• https://bdu.fstec.ru/vul/2026-00817 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54745 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54745 · Security Note
• https://t.me/cveNotify/137275 · Telegram Post
• https://colorful-meadow-5b9.notion.site/WN701AE_HardCode_vuln-14ac216a1c308015b571e68810d83e16 · Note
• https://twitter.com/CVEnew/status/1865061282464043024 · Twitter Post
• https://t.me/cvedetector/12240 · Telegram Post
• https://docs.wavlink.xyz/Firmware_ch/fm-701e · Note