CVE-2022-48166

Vulnerability

An access control issue exists in the Wavlink WL-WN530HG4 AC1200 router running firmware version M30HG4.V5030.201217. The /cgi-bin/ExportLogs.sh endpoint is exposed without any authentication, allowing an unauthenticated remote attacker to download sensitive configuration data and log files. The vulnerability is described in [1].

Exploitation

An attacker with network access to the router can simply send a GET request to /cgi-bin/ExportLogs.sh. No authentication, user interaction, or prior access is required. The router responds with the contents of configuration files and logs, including plaintext admin credentials [1].

Impact

Successful exploitation results in full disclosure of the router's configuration data and administrative credentials. An attacker can then log into the device's web dashboard with admin privileges, potentially gaining full control over the router's settings and network traffic [1].

Mitigation

The vendor Wavlink has not released a patched firmware version as of the publication date (2023-02-06) [1]. Users should consider replacing the device with a supported model if no update is provided, or restrict network access to the management interface to trusted hosts only.