Vulnerability Details CVE-2020-10973
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform a decryption step, but all decryption information is readily available.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.373
EPSS Ranking 97.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/Roni-Carta/nyra
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devices
- https://github.com/sudo-jtcsec/Nyra
- https://github.com/Roni-Carta/nyra
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devices
- https://github.com/sudo-jtcsec/Nyra
Products affected by CVE-2020-10973
-
cpe:2.3:h:wavlink:wn530hg4:-
-
cpe:2.3:h:wavlink:wn531g3:-
-
cpe:2.3:h:wavlink:wn533a8:-
-
cpe:2.3:h:wavlink:wn551k1:-
-
cpe:2.3:o:wavlink:wn530hg4_firmware:m30hg4.v5030.191116
-
cpe:2.3:o:wavlink:wn531g3_firmware:-
-
cpe:2.3:o:wavlink:wn533a8_firmware:-
-
cpe:2.3:o:wavlink:wn551k1_firmware:-