Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.
References
Link | Resource |
---|---|
https://drive.google.com/file/d/1s5uZGC_iSzfCJt9BJ8h-P24vmsrmttrf/view?usp=sharing | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-07-20 10:15
Updated : 2022-07-27 14:13
NVD link : CVE-2022-34045
Mitre link : CVE-2022-34045
JSON object : View
CWE
CWE-798
Use of Hard-coded Credentials
Products Affected
wavlink
- wl-wn530hg4_firmware
- wl-wn530hg4