cbcvebase.
CVE-2022-31847
published 2022-06-14

CVE-2022-31847: A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted…

PriorityP276high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
5.48%
91.8th percentile
A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request.

Affected

1 ranges
VendorProductVersion rangeFixed in
wavlinkwn579x3_firmware——

Detection & IOCsextracted from sources · hover to see the quote

path/cgi-bin/ExportAllSettings.sh↗
otherLogin=↗
otherPassword=↗
otherModel=↗
otherAuthMode=↗
  • →Send a GET request to /cgi-bin/ExportAllSettings.sh and check for HTTP 200 response containing all four strings: 'Login=', 'Password=', 'Model=', and 'AuthMode=' — their simultaneous presence confirms unauthenticated information disclosure.
  • →Shodan and FOFA queries can identify exposed WAVLINK devices: search for http.html containing 'Wavlink' or 'wavlink' (Shodan), or body containing 'wavlink' (FOFA).
  • ·The vulnerability is exploitable without authentication (PR:N, UI:N) via a crafted request to the CGI endpoint, meaning no prior access or user interaction is required. ↗
  • ·Affected firmware is specifically M79X3.V5030.180719 on the WAVLINK WN579 X3; detections should be scoped to this CPE to avoid false positives on other WAVLINK products.
  • ·The EPSS score of 0.50594 (97.856th percentile) indicates this vulnerability has a very high probability of exploitation in the wild; prioritize detection and patching accordingly.

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vulncheck7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.