CVE-2022-34570

WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing the messages.txt page.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:wavlink:wl-wn579x3_firmware:m79x3.v5030.191012:*:*:*:*:*:*:*
cpe:2.3:h:wavlink:wl-wn579x3:-:*:*:*:*:*:*:*

History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-863 CWE-532
CWE-425

27 Jul 2022, 12:18

Type Values Removed Values Added
References (MISC) https://www.wavlink.com/en_us/product/WL-WN579X3.html - (MISC) https://www.wavlink.com/en_us/product/WL-WN579X3.html - Product, Vendor Advisory
References (MISC) https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__messages.md - (MISC) https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__messages.md - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
First Time Wavlink wl-wn579x3
Wavlink
Wavlink wl-wn579x3 Firmware
CWE CWE-863
CPE cpe:2.3:h:wavlink:wl-wn579x3:-:*:*:*:*:*:*:*
cpe:2.3:o:wavlink:wl-wn579x3_firmware:m79x3.v5030.191012:*:*:*:*:*:*:*

25 Jul 2022, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-07-25 22:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-34570

Mitre link : CVE-2022-34570

CVE.ORG link : CVE-2022-34570


JSON object : View

Products Affected

wavlink

  • wl-wn579x3_firmware
  • wl-wn579x3
CWE
CWE-425

Direct Request ('Forced Browsing')

CWE-532

Insertion of Sensitive Information into Log File