CVE-2024-54747

In the firmware of the Wavlink WN531P3 device (version 202383), the /etc/shadow file contains a hardcoded password for the root account. Since the password is embedded in the software and identical across all devices in this series, an attacker who discovers it can log in as root on any vulnerable device. No user interaction or prior privileges are required.

The attacker gains full administrative (root) access to the device, enabling them to take control of its configuration, network, and potentially the entire infrastructure that the device has access to.

Apply patches available from the manufacturer according to the references. As immediate remedial measures, it is recommended to restrict device access only to trusted networks and monitor login attempts to the root account.

Wavlink WN531P3 with firmware version 202383