CVE-2022-34045

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-07-20

Last modified

2024-08-03

Weaknesses

CWE-798

Affected products

• Wl-wn530hg4 Firmware (Wavlink)

References

• https://drive.google.com/file/d/1s5uZGC_iSzfCJt9BJ8h-P24vmsrmttrf/view?usp=sharing