CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-10974

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-10974

Wavlink » Jetstream Ac3000 » Version: N/A

cpe:2.3:h:wavlink:jetstream_ac3000:-
Wavlink » Jetstream Erac3000 » Version: N/A

cpe:2.3:h:wavlink:jetstream_erac3000:-
Wavlink » Wl-Wn575a3 » Version: N/A

cpe:2.3:h:wavlink:wl-wn575a3:-
Wavlink » Wl-Wn579g3 » Version: N/A

cpe:2.3:h:wavlink:wl-wn579g3:-
Wavlink » Wn530h4 » Version: N/A

cpe:2.3:h:wavlink:wn530h4:-
Wavlink » Wn531a6 » Version: N/A

cpe:2.3:h:wavlink:wn531a6:-
Wavlink » Wn535g3 » Version: N/A

cpe:2.3:h:wavlink:wn535g3:-
Wavlink » Wn572hg3 » Version: N/A

cpe:2.3:h:wavlink:wn572hg3:-
Wavlink » Wn575a4 » Version: N/A

cpe:2.3:h:wavlink:wn575a4:-
Wavlink » Wn578a2 » Version: N/A

cpe:2.3:h:wavlink:wn578a2:-
Wavlink » Wn579g3 » Version: N/A

cpe:2.3:h:wavlink:wn579g3:-
Wavlink » Wn579x3 » Version: N/A

cpe:2.3:h:wavlink:wn579x3:-
Wavlink » Wn57x93 » Version: N/A

cpe:2.3:h:wavlink:wn57x93:-
Wavlink » Jetstream Ac3000 Firmware » Version: N/A

cpe:2.3:o:wavlink:jetstream_ac3000_firmware:-
Wavlink » Jetstream Erac3000 Firmware » Version: N/A

cpe:2.3:o:wavlink:jetstream_erac3000_firmware:-
Wavlink » Wl-Wn575a3 Firmware » Version: rpt75a3.v4300.180801

cpe:2.3:o:wavlink:wl-wn575a3_firmware:rpt75a3.v4300.180801
Wavlink » Wl-Wn579g3 Firmware » Version: m79x3.v5030.180719

cpe:2.3:o:wavlink:wl-wn579g3_firmware:m79x3.v5030.180719
Wavlink » Wn530h4 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn530h4_firmware:-
Wavlink » Wn531a6 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn531a6_firmware:-
Wavlink » Wn535g3 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn535g3_firmware:-
Wavlink » Wn572hg3 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn572hg3_firmware:-
Wavlink » Wn575a4 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn575a4_firmware:-
Wavlink » Wn578a2 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn578a2_firmware:-
Wavlink » Wn579g3 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn579g3_firmware:-
Wavlink » Wn579x3 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn579x3_firmware:-
Wavlink » Wn57x93 Firmware » Version: N/A

cpe:2.3:o:wavlink:wn57x93_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-10974

Products

Pricing

Contact Us