CVE-2022-34571

CVSS V2 None CVSS V3 High 8

Description

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml.

Overview

CVE ID
CVE-2022-34571

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2022-07-25T22:15:08

Last Modified Date
2022-08-03T16:44:34

Weakness Enumerations

CWE	URL
CWE-863	http://cwe.mitre.org/data/definitions/863.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:o:wavlink:wifi-repeater_firmware:rpta2-77w.m4300.01.gd.2017sep19:::::::*	1	OR

CVSS Version 3

Version
3.1

Vector String
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
ADJACENT_NETWORK

Attack Compatibility
LOW

Privileges Required
LOW

User Interaction
NONE

Scope
UNCHANGED

Confidentiality Impact
HIGH

Availability Impact
HIGH

Base Score
8

Base Severity
HIGH

Exploitability Score
2.1

Impact Score
5.9

References

Reference URL	Reference Tags
https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_syslog.shtml.assets/WiFi-Repeater_syslog.shtml.md
https://www.wavlink.com/en_us/category/REPEATER.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-34571
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34571

History

Created	Old Value	New Value	Data Type	Notes
2022-07-25 23:00:19				Added to TrackCVE