Buffer overflow

An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. The set of affected scripts is similar to CVE-2020-12266...

CVE-2020-12266

CVE-2020-12266 concerns multiple externally accessible pages (live_*.shtml) on Wavlink/WN-series devices that can be accessed without authentication, exposing extensive device information (IP/MAC, firmware, location, processes, interfaces, DHCP leases, wireless networks in range, memory, configur...