CVE-2022-34049 Information disclosure in n/a

What is CVE-2022-34049?

CVE-2022-34049 is a medium-severity vulnerability in n/a, published on 20 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.

Weakness: CWE-552

Which versions are affected by CVE-2022-34049?

It affects 1 product.

Products include Wavlink Wl-Wn530hg4 Firmware.

How do I fix CVE-2022-34049?

No fix has been published for CVE-2022-34049 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-34049 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-34049 exists.

Public exploit code: 1 Nuclei template.

Other vulnerabilities in n/a

• CVE-2022-34045 Hardcoded credentials in n/a Critical 9.8
• CVE-2020-15489 Command injection in n/a Critical 9.8
• CVE-2020-15490 Memory corruption in n/a Critical 9.8
• CVE-2020-10971 Command injection in n/a High 8.8
• CVE-2022-48166 Missing authorization in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xgxg-m2p7-6pr3.