CVE Feed

    Dashboard / CVE / CVE-2020-10974

    CVE-2020-10974

    An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000

    Published:May 7, 2020
    Last Modified:Nov 21, 2024
    EPS:May 7, 2020
    EPSS Score:0.0034
    CVSS Score:7.5

    Affected Products

    Vendor
    Wavlink
    Product
    Jetstream Ac3000
    Vendor
    Wavlink
    Product
    Jetstream Ac3000 Firmware
    Vendor
    Wavlink
    Product
    Jetstream Erac3000
    Vendor
    Wavlink
    Product
    Jetstream Erac3000 Firmware
    Vendor
    Wavlink
    Product
    Wl-wn575a3
    Vendor
    Wavlink
    Product
    Wl-wn575a3 Firmware
    Vendor
    Wavlink
    Product
    Wl-wn579g3
    Vendor
    Wavlink
    Product
    Wl-wn579g3 Firmware
    Vendor
    Wavlink
    Product
    Wn530h4
    Vendor
    Wavlink
    Product
    Wn530h4 Firmware
    Vendor
    Wavlink
    Product
    Wn531a6
    Vendor
    Wavlink
    Product
    Wn531a6 Firmware
    Vendor
    Wavlink
    Product
    Wn535g3
    Vendor
    Wavlink
    Product
    Wn535g3 Firmware
    Vendor
    Wavlink
    Product
    Wn572hg3
    Vendor
    Wavlink
    Product
    Wn572hg3 Firmware
    Vendor
    Wavlink
    Product
    Wn575a4
    Vendor
    Wavlink
    Product
    Wn575a4 Firmware
    Vendor
    Wavlink
    Product
    Wn578a2
    Vendor
    Wavlink
    Product
    Wn578a2 Firmware
    Vendor
    Wavlink
    Product
    Wn579g3
    Vendor
    Wavlink
    Product
    Wn579g3 Firmware
    Vendor
    Wavlink
    Product
    Wn579x3
    Vendor
    Wavlink
    Product
    Wn579x3 Firmware
    Vendor
    Wavlink
    Product
    Wn57x93
    Vendor
    Wavlink
    Product
    Wn57x93 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High