Wavlink Wl-WN531P3 Firmware vulnerabilities

2 CVEs affecting Wavlink Wl-WN531P3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-48705, published 2025-09-02.

More from Wavlink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23900, published 2022-04-07. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST…
• CVE-2024-48705, published 2025-09-02. Medium severity, CVSS 6.5. EPSS: 3.4% chance of exploitation in the next 30 days. Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is…