Authentication Bypass Vulnerabilities in WAVLINK Router Products
CVE-2020-12126

9.8CRITICAL

Key Information:

Vendor

Wavlink

Status
Wn530h4 Firmware
Vendor
CVE Published:
2 October 2020

What is CVE-2020-12126?

Multiple authentication bypass vulnerabilities exist in the /cgi-bin/ endpoint of WAVLINK routers, specifically the WN530H4 model. These vulnerabilities can be exploited by attackers to leak sensitive router settings, modify configuration variables, and potentially induce denial of service conditions through an unauthenticated access point. It is crucial for users to stay informed and implement necessary security measures to safeguard their network devices.

References

https://www.wavlink.com/en_us/product/WL-WN530H4.html
x_refsource_MISC
https://cerne.xyz/bugs/CVE-2020-12126
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-12126 : Authentication Bypass Vulnerabilities in WAVLINK Router Products