Wavlink Wl-WN531AX2 Firmware vulnerabilities

5 CVEs affecting Wavlink Wl-WN531AX2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32622, published 2023-06-30.

More from Wavlink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-32622, published 2023-06-30. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.
• CVE-2023-32621, published 2023-06-30. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.
• CVE-2023-32612, published 2023-06-30. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands…
• CVE-2023-32620, published 2023-06-30. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network.
• CVE-2023-32613, published 2023-06-30. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login…