CVE-2022-35518 : Security Advisory and Response

A vulnerability has been identified in WAVLINK routers, specifically models WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3. This vulnerability in nas.cgi allows for command injection due to lack of input filtering on parameters User1Passwd and User1 in the /nas_disk.shtml page.

Understanding CVE-2022-35518

This section provides insights into the nature and impact of the CVE-2022-35518 vulnerability in WAVLINK routers.

What is CVE-2022-35518?

The CVE-2022-35518 vulnerability arises from the absence of input filtering on specific parameters, allowing threat actors to execute arbitrary commands through the nas.cgi script on vulnerable WAVLINK router models.

The Impact of CVE-2022-35518

Exploitation of this vulnerability could enable unauthorized individuals to execute malicious commands, potentially compromising the security and integrity of the affected routers and the connected network.

Technical Details of CVE-2022-35518

In this section, we delve into the technical aspects of the CVE-2022-35518 vulnerability, including its description, affected systems, and exploitation mechanism.

Vulnerability Description

The vulnerability stems from the lack of proper input validation on the User1Passwd and User1 parameters within the nas.cgi script, facilitating command injection attacks on WAVLINK routers.

Affected Systems and Versions

CVE-2022-35518 impacts WAVLINK router models WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 where the nas.cgi script lacks parameter filtering, leaving them susceptible to exploitation.

Exploitation Mechanism

Threat actors can exploit this vulnerability by injecting malicious commands through the User1Passwd and User1 parameters on the /nas_disk.shtml page, thereby gaining unauthorized access and control over the affected router.

Mitigation and Prevention

This section outlines the steps to mitigate the risks associated with CVE-2022-35518 and prevent potential security breaches.

Immediate Steps to Take

Users are advised to update their WAVLINK routers to the latest firmware version provided by the vendor, implementing necessary security patches to address the vulnerability.

Long-Term Security Practices

To enhance overall network security, it is crucial to follow best practices such as regularly updating router firmware, using strong and unique passwords, and restricting access to critical network devices.

Patching and Updates

Vendor-supplied patches and firmware updates play a vital role in remedying known vulnerabilities. Users should stay informed about security bulletins and promptly apply recommended patches to safeguard their WAVLINK routers against exploitation.