Vulnerabilities > Wavlink > Wn533A8 Firmware > m33a8.v5030.190716

DATE CVE VULNERABILITY TITLE RISK
2022-07-20 CVE-2022-34046 Incorrect Authorization vulnerability in Wavlink Wn533A8 Firmware M33A8.V5030.190716
An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].
network
low complexity
wavlink CWE-863
7.5
2022-07-20 CVE-2022-34048 Cross-site Scripting vulnerability in Wavlink Wn533A8 Firmware M33A8.V5030.190716
Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter.
network
low complexity
wavlink CWE-79
6.1