CVE-2022-40622

8.8 highEPSS 0.7%

High (8.8) in wavlink wn531g3 firmware. EPSS 0.7% chance of exploitation in the next 30 days.

The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-304
Published: 2022-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wavlink:wn531g3_firmware

References

https://youtu.be/cSileV8YbsQ?t=655
https://youtu.be/cSileV8YbsQ?t=655

Check your stack JSON