CVE-2020-10972

 

Published at: - 07-05-2020 08:15

Last modified: - 29-04-2022 03:26

Total changes: - 3

Description

An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4, Wavlink WN531G3, and Wavlink WN572HG3

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972
• https://github.com/sudo-jtcsec/Nyra
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972-affected_devices
• https://github.com/Roni-Carta/nyra

 

Keywords

NVD

 

CVE-2020-10972

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures