CVE-2023-7092 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Uniway UW-302VP 2.0 router's administrative web interface, specifically when processing the /boaform/wlan_basic_set.cgi file with manipulated wlanssid/password arguments. This vulnerability has a CVSS v3.1 score of 4.3 (Medium), indicating a low impact on integrity and no impact on confidentiality or availability, with a network attack vector and user interaction required. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it lacks exploit code in common frameworks like Metasploit or Nuclei, with minimal community discussion or media coverage. The vendor did not respond to early disclosure attempts.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0CPE matchmatch criteria | cpe:2.3:o:uniwayinfo:uw-302vp_firmware:2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.