CVE-2022-48165

Deeper analysis

CVE-2022-48165 is an access control vulnerability in the /cgi-bin/ExportLogs.sh component of the Wavlink WL-WN530H4 router running firmware version M30H4.V5030.210121. The flaw permits unauthenticated network access to sensitive files, exposing configuration data and log contents that include administrative credentials. It carries a CVSS 3.1 base score of 7.5 reflecting network attack vector, low complexity, and high confidentiality impact without requiring privileges or user interaction.

An unauthenticated remote attacker can directly request the affected CGI endpoint to retrieve the exported logs and configuration files. Successful exploitation yields administrator usernames and passwords, enabling subsequent authenticated access to the device management interface and full control over router settings, connected clients, and network traffic.

The EPSS score currently stands at 0.8130 with a recorded peak of 0.8210, indicating sustained and elevated exploitation interest since disclosure. No vendor advisory or patch information is referenced in the available sources.