Lucene search

MitreCVE-2020-12126

HistoryOct 02, 2020 - 9:15 a.m.

CVE-2020-12126

2020-10-0209:15:13

CWE-287

mitre

web.nvd.nist.gov

cve-2020-12126

authentication bypass

wavlink

router settings

configuration

denial of service

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

62.1%

JSON

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint.

Affected configurations

Nvd

Node

wavlinkwn530h4_firmwareMatchm30h4.v5030.190403

AND

wavlinkwn530h4Match-

VendorProductVersionCPE
wavlinkwn530h4_firmwarem30h4.v5030.190403cpe:2.3:o:wavlink:wn530h4_firmware:m30h4.v5030.190403:*:*:*:*:*:*:*
wavlinkwn530h4-cpe:2.3:h:wavlink:wn530h4:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wavlink	wn530h4_firmware	m30h4.v5030.190403	cpe:2.3:o:wavlink:wn530h4_firmware:m30h4.v5030.190403:::::::*
wavlink	wn530h4	-	cpe:2.3:h:wavlink:wn530h4:-:::::::*

References

cerne.xyz/bugs/CVE-2020-12126

www.wavlink.com/en_us/product/WL-WN530H4.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

62.1%

JSON

Related for CVE-2020-12126