critical9.8
CVE-2020-12124
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arb…
Impact
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wavlink | Wn530h4 Firmware | Version m30h4.v5030.190403 |