CVE-2020-10973
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 7.6%
exploitation probability
7.6%top 6% of all CVEs
observed exploitation
nono source reports it
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform a decryption step, but all decryption information is readily available.
Affected products
n/a · n/a