CVE-2020-10972 - CVE House
Back to Database
Status published High CVE-2020-10972

An issue was discovered where a page is exposed that...

Vulnerability Description

An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4, Wavlink WN531G3, and Wavlink WN572HG3

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10972

Credits & Attribution

No credits recorded in the NVD database.

References

More from wavlink

View All →
CVE-2022-48166
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated...
Unknown 0
CVE-2022-48165
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
High 7.5
CVE-2022-48164
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
Unknown 0
CVE-2022-44356
WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325...
Unknown 0
CVE-2022-37149
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection...
Critical 9.8

Affected Vendor

Affected Software

wn530hg4 firmware, wn531g3 firmware, wn572hg3 firmware
Vulnerable Versions:
m30hg4.v5030.191116

Timeline

Official Publish: May 7th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.