Wavlink Wn531g3 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Wavlink Wn531g3 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-40622 — CVSS 8.8 (high): The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use…
• CVE-2022-40623 — CVSS 8.8 (high): The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with…
• CVE-2020-10972 — CVSS 7.5 (high): An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No…
• CVE-2020-10973 — CVSS 7.5 (high): An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh…
• CVE-2020-12266 — CVSS 7.5 (high): An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store…
• CVE-2022-40621 — CVSS 7.5 (high): Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and…