high7.5
CVE-2020-10973
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST…
Impact
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform a decryption step, but all decryption information is readily available.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wavlink | Wn530hg4 Firmware | Version m30hg4.v5030.191116 |
| Wavlink | Wn531g3 Firmware | All versions |
| Wavlink | Wn533a8 Firmware | All versions |
| Wavlink | Wn551k1 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Roni-Carta/nyra
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devices
- https://github.com/sudo-jtcsec/Nyra
- https://github.com/Roni-Carta/nyra
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devices
- https://github.com/sudo-jtcsec/Nyra