Back to Database
Status published
High
CVE-2020-12123
CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4...
Vulnerability Description
CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If a user is authenticated in the router portal, then this attack will work.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12123
Credits & Attribution
No credits recorded in the NVD database.
References
More from wavlink
View All →CVE-2022-48166
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated...
Unknown
0
CVE-2022-48165
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
High
7.5
CVE-2022-48164
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
Unknown
0
CVE-2022-44356
WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325...
Unknown
0
CVE-2022-37149
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection...
Critical
9.8
Affected Vendor
wavlink
View all reports →Affected Software
wn530h4 firmware
Vulnerable Versions:
m30h4.v5030.190403
Timeline
Official Publish:
October 2nd, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.