CVE-2023-30313

Vulnerability

CVE-2023-30313 affects Wavlink QUANTUM D2G routers, stemming from weaknesses in NAT port preservation and reverse path validation. These flaws allow an off-path attacker to infer active TCP connections and manipulate NAT mappings, leading to session hijacking [1].

Exploitation

An attacker on the same network can detect TCP connections between a victim and an external server. By sending crafted packets, the attacker evicts the original NAT mapping and establishes a new one, intercepting server packets to obtain sequence numbers. This requires no authentication and can be performed remotely within the local network [1].

Impact

Successful exploitation permits the attacker to forcibly close TCP connections, inject malicious data into plaintext traffic, or reroute server packets to the attacker. This results in denial of service or potential data manipulation. The attack is efficient, with high success rates across tested scenarios [1].

Mitigation

Wavlink has been notified and mitigation strategies have been suggested. Users should apply firmware updates if available, or consider disabling NAT features until a patch is released [1].