CVE-2020-13117

2021-02-0918:53:18

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.143 Low

EPSS

Percentile

95.8%

JSON

Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.

References

blog.0xlabs.com/2021/02/wavlink-rce-CVE-2020-13117.html