Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-40621

UNKNOWN
Published 2022-09-13T20:35:12.006313Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-40621. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed password of a logged on user and use it in a classic Pass-the-Hash style attack.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

WAVLINK

WN531G3

Affected Versions:

M31G3.V5030.200325

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-8mh6-982p-25hv

Advisory Details

Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed password of a logged on user and use it in a classic Pass-the-Hash style attack.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-40621
WEB https://www.malbytes.net/2022/07/wavlink-quantum-d4g-zero-day-part-01.html

Advisory provided by GitHub Security Advisory Database. Published: September 14, 2022, Modified: September 20, 2022

References

https://www.malbytes.net/2022/07/wavlink-quantum-d4g-zero-day-part-01.html
Published: 2022-09-13T20:35:12.006313Z
Last Modified: 2024-09-17T02:01:24.046Z
Copied to clipboard!