CVE-2022-34571 - An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml

Back Back to CVE browser

HIGH

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml

Published Jul 25, 2022

8.0

HIGH

CVSS 3.1

EPSS 0.87%

Description

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-425

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37523
Advisory
https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_syslog.shtml.assets/WiFi-Repeater_syslog.shtml.md
x_refsource_MISCExploitThird Party Advisory
https://www.wavlink.com/en_us/category/REPEATER.html
x_refsource_MISCProductVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37523		Advisory
https://github.com/pghuanghui/CVE_Request/blob/main/WiFi-Repeater/WiFi-Repeater_syslog.shtml.assets/WiFi-Repeater_syslog.shtml.md		x_refsource_MISCExploitThird Party Advisory
https://www.wavlink.com/en_us/category/REPEATER.html		x_refsource_MISCProductVendor Advisory