Login Request a demo
High severity · published Sep 13, 2022
CVE-2022-40622
WAVLINK Quantum D4G (WN531G3) Session Management by IP Address
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WN
WN531G3 · WAVLINK
M31G3.V5030.200325 through M31G3.V5030.200325 · source: vendor
WF
Wn531g3 Firmware · Wavlink
through m31g3.v5030.200325 · source: NVD
Affected product
WN
WN531G3
WAVLINK
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-40622
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-40622
Exploit
https://youtu.be/cSileV8YbsQ?t=655
More from WN531G3
8.8
CVE-2022-40623
WAVLINK Quantum D4G (WN531G3) CSRF
7.5
CVE-2022-40621
WAVLINK Quantum D4G (WN531G3) Pass-The-Hash