CVE-2023-32612

Summary

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege.

Affected Software

VendorProductVersion RangeStatus
WAVLINK TECHNOLOGY Ltd.WL-WN531AX2firmware versions prior to 2023526affected

Weaknesses

  • Client-side enforcement of server-side security

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References