First published: Mon Jul 25 2022(Updated: )
An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessing the page mb_wifibasic.shtml.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Wavlink Wifi-repeater Firmware | =rpta2-77w.m4300.01.gd.2017sep19 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-34573 is an access control issue in the Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 firmware that allows attackers to arbitrarily configure device settings by accessing the page mb_wifibasic.shtml.
The Wavlink WiFi-Repeater firmware version RPTA2-77W.M4300.01.GD.2017Sep19 is affected by CVE-2022-34573.
CVE-2022-34573 has a severity rating of 6.3 (medium).
An attacker can exploit CVE-2022-34573 by accessing the page mb_wifibasic.shtml and arbitrarily configuring device settings.
Yes, it is recommended to update to a fixed version of the Wavlink WiFi-Repeater firmware to address the access control issue.