CVE-2022-48164
HIGH EXPLOITED NUCLEIWavlink WL-WN533A8 M33A8.V5030.190716 - Info Disclosure
Title source: llmExploitation Summary
CVE-2022-48164 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.
Description
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.
Nuclei Templates (1)
Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure
HIGHby ritikchaddha
Shodan:
html:"WN533A8"
FOFA:
body="WN533A8"
References (2)
Core 2
Core References
Exploit, Third Party Advisory
https://docs.google.com/document/d/1JgqpBYRxyU0WKDSqkvi4Yo0723k7mrIUeuH9i1eEs8U/edit?usp=sharing
Exploit, Third Party Advisory
https://github.com/strik3r0x1/Vulns/blob/main/WAVLINK_WN533A8.md
Scores
CVSS v3
7.5
EPSS
0.0310
EPSS Percentile
86.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
VulnCheck KEV
2025-05-12
Status
published
Products (1)
wavlink/wl-wn533a8_firmware
m33a8.v5030.190716
Published
Feb 06, 2023
Tracked Since
Feb 18, 2026