VulnerabilityModified
CVE-2020-10972
An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page.
HIGH 7.5EPSS 1.73%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.73%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4, Wavlink WN531G3, and Wavlink WN572HG3
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.73% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-306, CWE-522
- Affected
- wavlink/wn530hg4 firmware · wavlink/wn531g3 firmware · wavlink/wn572hg3 firmware
- Source
- cve@mitre.org
References
- https://github.com/Roni-Carta/nyraNot Applicable, Third Party Advisory
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972Third Party Advisory
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972-affected_devicesThird Party Advisory
- https://github.com/sudo-jtcsec/NyraBroken Link
- https://github.com/Roni-Carta/nyraNot Applicable, Third Party Advisory
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972Third Party Advisory
- https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972-affected_devicesThird Party Advisory
- https://github.com/sudo-jtcsec/NyraBroken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.