CVE-2020-12266

CVE-2020-12266 concerns multiple externally accessible pages (live_*.shtml) on Wavlink/WN-series devices that can be accessed without authentication, exposing extensive device information (IP/MAC, firmware, location, processes, interfaces, DHCP leases, wireless networks in range, memory, configur...

CVE-2020-10974

The CVE-2020-10974 entry describes an information-disclosure flaw in a device backup feature: a crafted POST request can return the current device configuration in cleartext, including the administrator password, without any authentication. Affected devices include WAVLINK WN575A3, WN579G3, WN531...