High severity8.8NVD Advisory· Published Sep 13, 2022· Updated Jun 17, 2026
CVE-2022-40622
CVE-2022-40622
Description
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.
Affected products
2- Range: M31G3.V5030.200325
- Range: M31G3.V5030.200325
Patches
Vulnerability mechanics
References
1- youtu.be/cSileV8YbsQnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.