CVE-2022-44356 Information disclosure in n/a

High 7.5 Published 29 Nov 2022 Updated 25 Apr 2025

Unauthenticated attackers can download configuration data and log files from WAVLINK Quantum D4G routers.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-44356?

CVE-2022-44356 is a high-severity vulnerability in n/a, published on 29 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files.

Weakness: CWE-552

Which versions are affected by CVE-2022-44356?

It affects 1 product.

Products include Wavlink Wl-Wn531g3 Firmware.

How do I fix CVE-2022-44356?

No fix has been published for CVE-2022-44356 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-44356 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-44356 exists.

Public exploit code: 1 Nuclei template.

Sources

Also known as GHSA-59w9-v72g-j4rg.