CVE-2020-10972

CVE-2020-10972 describes an information-disclosure flaw where an unauthenticated page exposes the current administrator password in cleartext within the page source (live_?.shtml with the variable syspasswd). Affected devices include Wavlink WN530HG4, WN531G3, and WN572HG3. Public sources in the ...