CVE-2020-10974

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the…

published May 7, 2020

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01685 · 76.8th percentile
Published
2020-05-07T17:42Z
EPSS history
Timeline
  • 07 MAY 17:42Z
    An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the…
    cvelistv5