Wavlink Wl-WN531G3 Firmware vulnerabilities

3 CVEs affecting Wavlink Wl-WN531G3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-44356, published 2022-11-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44260, published 2022-03-17. High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days. A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When…
CVE-2022-44356, published 2022-11-29. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data…
CVE-2021-44259, published 2022-03-17. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an…