PT-2022-21984 · Wavlink · Wavlink Wn530H4

Name of the Vulnerable Software and Affected Versions: Wavlink WN530HG4 version M30HG4.V5030.191116 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/set safety.shtml?r=52300" by searching for the variable syspasswd...

PT-2020-12457

Name of the Vulnerable Software and Affected Versions Wavlink WN530HG4 Wavlink WN531G3 Wavlink WN572HG3 Description An issue was discovered where a page, specifically a certain live ?.shtml page with the variable syspasswd, is exposed and contains the current administrator password in cleartext i...

CVE-2009-1561: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd...