Vulnerability · Published Jun 22, 2023 · Assigned by mitre

CVE-2023-29708

High 7.5

In plain English

A high-severity incorrect authorization in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 14.2% (higher than 97% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)14.2%top 3.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted payload.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-863

References

https://holistic-height-e6d.notion.site/WAVLINK-Wi-Fi-APP-Arbitrary-factory-reset-vulnerability-b2d747693a7442aaa8b045e57bbd8297
https://github.com/shellpei/WAVLINK-Reset/blob/main/CVE-2023-29708