CVE-2023-3380

Summary

CVE-2023-3380 is a newly disclosed critical vulnerability affecting Wavlink WN579X3 routers up to version 20230615. The issue lies within an unknown function of the /cgi-bin/adm.cgi component, specifically the pingIp argument. An attacker can exploit this injection vulnerability remotely, making it a significant risk. Although the exploit has been made public, the vendor has yet to respond to disclosure efforts, leaving users potentially vulnerable. The identifier for this issue is VDB-232236.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.