CVE-2022-34045

CRITICAL NUCLEI

Wavlink WN530HG4 M30HG4.V5030.191116 - Use of Hard-coded Credentials in Configuration File Encryption

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2022-34045 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.

Nuclei Templates (1)

WAVLINK WN530HG4 - Improper Access Control
CRITICALVERIFIEDby arafatansari
Shodan: http.html:"WN530HG4" || http.html:"wn530hg4" || http.title:"wi-fi app login"
FOFA: body="wn530hg4" || title="wi-fi app login"

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0232
EPSS Percentile 81.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-798
Status published
Products (1)
wavlink/wl-wn530hg4_firmware m30hg4.v5030.191116
Published Jul 20, 2022
Tracked Since Feb 18, 2026