Wavlink WN531A6 Firmware vulnerabilities

2 CVEs affecting Wavlink WN531A6 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-10974, published 2020-05-07.

More from Wavlink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-12266, published 2020-04-27. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically…
• CVE-2020-10974, published 2020-05-07. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication…