CVE-2020-10972

Katalog CVE

CVSS 7.5 · High EPSS 1,8%

Kerentanan Missing Authentication for Critical Function pada wavlink wn530hg4 firmware, wavlink wn531g3 firmware +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4, Wavlink WN531G3, and Wavlink WN572HG3

Rincian

Terbit di NVD

7 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function
CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Roni-Carta/nyra not applicable · advisory pihak ketiga
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972 advisory pihak ketiga
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972-affected_devices advisory pihak ketiga
• https://github.com/sudo-jtcsec/Nyra broken link