Wavlink Wifi-Repeater Firmware vulnerabilities

5 CVEs affecting Wavlink Wifi-Repeater Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-34575, published 2022-07-25.

More from Wavlink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-34571, published 2022-07-25. High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days. An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page…
• CVE-2022-34575, published 2022-07-25. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing fctest.shtml.
• CVE-2022-34574, published 2022-07-25. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tftpd32.ini.
• CVE-2022-34572, published 2022-07-25. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page tftp.txt.
• CVE-2022-34573, published 2022-07-25. Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days. An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessing the page mb_wifibasic.shtml.