CVE-2022-48166
HIGH NUCLEIWavlink WL-WN530HG4 M30HG4.V5030.201217 - Unauthenticated Configuration and Log File Download
Title source: llmExploitation Summary
CVE-2022-48166 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.
Nuclei Templates (1)
Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure
HIGHVERIFIEDby ritikchaddha
Shodan:
html:"WN530HG4"
FOFA:
body="WN530HG4"
References (2)
Core 2
Core References
Exploit, Technical Description, Third Party Advisory
https://docs.google.com/document/d/1zvbuu3Hkk3CAkojAivlUESvtHblHJNLJdpGOoNtk-Vo/edit?usp=sharing
Exploit, Third Party Advisory
https://github.com/strik3r0x1/Vulns/blob/main/WAVLINK%20WN530HG4.md
Scores
CVSS v3
7.5
EPSS
0.0282
EPSS Percentile
84.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-862
Status
published
Products (1)
wavlink/wl-wn530hg4_firmware
m30hg4.v5030.201217
Published
Feb 06, 2023
Tracked Since
Feb 18, 2026