CVE-2020-10973: wavlink wn530hg4_firmware
Vulnerability summary
CVE-2020-10973 is a high (CVSS 7.5) vulnerability in wavlink wn530hg4_firmware. EPSS estimates a 7.55% chance of exploitation in the next 30 days, higher than 94.5% of scored vulnerabilities.
Timeline
- 07-05-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform a decryption step, but all decryption information is readily available.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
7.55%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 7.55% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Wavlink4 products
- wn530hg4_firmwarem30hg4.v5030.191116
- wn531g3_firmwarena
- wn533a8_firmwarena
- wn551k1_firmwarena
1 vendor · 4 products
References
4 links- github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devicesX Refsource MISCThird Party Advisory