CVE-2020-13117

Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request...

Cross site request forgery (csrf)

Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request...

CVE-2020-10974: Missing Authentication for Critical Function

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3,...

PT-2020-12459

Name of the Vulnerable Software and Affected Versions Wavlink WN575A3 Wavlink WN579G3 Wavlink WN531A6 Wavlink WN535G3 Wavlink WN530H4 Wavlink WN57X93 Wavlink WN572HG3 Wavlink WN575A4 Wavlink WN578A2 Wavlink WN579X3 Jetstream AC3000/ERAC3000 Description An issue was discovered affecting a backup...