CVE-2022-34048

EPSS 5.1%

Vexday Risk Score

38Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 5.1%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

20 Jul 2022Published on NVD

01 Aug 2022Public PoC

Weaponization speed

11 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter.

Affected products

public PoCs found — 1

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References