Vulnerability · Published Sep 13, 2022 · Assigned by rapid7

CVE-2022-40622WAVLINK Quantum D4G (WN531G3) Session Management by IP Address

High 8.8

In plain English

A high-severity security flaw in WN531G3 from WAVLINK. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)0.7%top 45.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.

Affected products (as reported)

Vendor	Product	Versions
WAVLINK	WN531G3	M31G3.V5030.200325 – through M31G3.V5030.200325

Weakness: CWE-304

References

https://youtu.be/cSileV8YbsQ?t=655 x_refsource_MISC