CVE-2021-44259

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page…

published March 17, 2022

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

🚨 A remote attacker can tap into your WAVLINK AC1200 without any authentication—talk about letting in an uninvited guest! 🔥 Think of it like a party where your front door is wide open, and anyone can walk in without knocking—the last thing you want is a stranger getting too cozy! This vulnerability could allow an unauthorized user to access sensitive device settings, potentially leading to network manipulation or unauthorized changes. If someone gains control, they could wreak havoc on your home network, making it a ripe target for malicious activity.

Put simply

Think of it like a party where your front door is wide open, and anyone can walk in without knocking—the last thing you want is a stranger getting too cozy! This flaw exists in the 'wx.html' page of the WAVLINK AC1200 router, where an attacker can directly access the page without needing to log in, effectively masquerading as a friend of the device owner.

What to do

This vulnerability could allow an unauthorized user to access sensitive device settings, potentially leading to network manipulation or unauthorized changes. If someone gains control, they could wreak havoc on your home network, making it a ripe target for malicious activity. To safeguard your network, update the router firmware to version WAVLINK-A42W-1.27.6-20180418 or later, and review your device's security settings. Consider setting a stronger password for your router as an additional precaution. You've got this! By taking action now, you can keep your network safe and secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01958 · 80.1th percentile
Published
2022-03-17T12:13Z
EPSS history
Timeline
  • 17 MAR 12:13Z
    A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page…
    cvelistv5