CVE-2022-48165

HIGH NUCLEI

Wavlink WL-WN530H4 M30H4.V5030.210121 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2022-48165 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.

Nuclei Templates (1)

Wavlink - Improper Access Control
HIGHVERIFIEDby For3stCo1d
Shodan: http.favicon.hash:-1350437236
FOFA: icon_hash=-1350437236

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0328
EPSS Percentile 86.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (1)
wavlink/wl-wn530h4_firmware m30h4.v5030.210121
Published Feb 03, 2023
Tracked Since Feb 18, 2026