CVE-2025-10322
MEDIUMWavlink Wl-wn578w2 Firmware - Password Reset Weakness
Title source: ruleDescription
A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References (4)
Scores
CVSS v3
5.3
EPSS
0.0013
EPSS Percentile
31.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Classification
CWE
CWE-640
Status
published
Affected Products (1)
wavlink/wl-wn578w2_firmware
Timeline
Published
Sep 12, 2025
Tracked Since
Feb 18, 2026