Remote Buffer Overflow Vulnerability in WAVLINK WN530H4 Device
CVE-2020-12125

9.8CRITICAL

Key Information:

Vendor

Wavlink

Status
Wn530h4 Firmware
Vendor
CVE Published:
2 October 2020

What is CVE-2020-12125?

A significant remote buffer overflow vulnerability exists in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 device. By exploiting this vulnerability, an attacker can execute arbitrary instructions on the device with root privileges, without necessitating any authentication. This flaw poses a substantial risk, as it enables unauthorized access to critical system resources, potentially leading to further system compromise.

References

https://www.wavlink.com/en_us/product/WL-WN530H4.html
x_refsource_MISC
https://cerne.xyz/bugs/CVE-2020-12125
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.