Wavlink Wn575A4 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wavlink Wn575A4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2020-13117wavlinkwn575a4_firmware+1
EPSS score
68.58%
Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.7.5CVE-2020-10974wavlinkjetstream_ac3000_firmware+12
EPSS score
1.69%
An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000