Cross site request forgery (csrf)

2021-02-0919:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.143 Low

EPSS

Percentile

95.8%

JSON

Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.

CPENameOperatorVersion
wn575a4_firmwareeq<= 2020515
wn579x3_firmwareeq<= 2020515

CPE	Name	Operator	Version
	wn575a4_firmware	eq	<= 2020515
	wn579x3_firmware	eq	<= 2020515

References

blog.0xlabs.com/2021/02/wavlink-rce-CVE-2020-13117.html