Back to Database
Status published
Critical
CVE-2020-12124
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of...
Vulnerability Description
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12124
Credits & Attribution
No credits recorded in the NVD database.
References
More from wavlink
View All →CVE-2022-48166
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated...
Unknown
0
CVE-2022-48165
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
High
7.5
CVE-2022-48164
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink...
Unknown
0
CVE-2022-44356
WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325...
Unknown
0
CVE-2022-37149
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection...
Critical
9.8
Affected Vendor
wavlink
View all reports →Affected Software
wn530h4 firmware
Vulnerable Versions:
m30h4.v5030.190403
Timeline
Official Publish:
October 2nd, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.