Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-40623

WAVLINK Quantum D4G (WN531G3) CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAVLINK WN531G3

  • M31G3.V5030.200325 to ≤ M31G3.V5030.200325affected

References