CVE-2023-32622

Summary

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.

Affected Software

VendorProductVersion RangeStatus
WAVLINK TECHNOLOGY Ltd.WL-WN531AX2firmware versions prior to 2023526affected

Weaknesses

  • Improper neutralization of special elements in output used by a downstream component ('Injection')

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References