← Vulnerability feed

Vulnerability record · CVE-2020-10972 · published 7 May 2020

CVE-2020-10972: Wavlink wn530hg4 firmware missing authentication for critical function vulnerability

Wavlink · Wn530hg4 Firmware

An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4, Wavlink WN531G3, and Wavlink WN572HG3

7.5 CVSS 3.1 High EPSS 1.8% · top 22.2% CWE-306 · Missing authentication for critical functionCWE-522 · Insufficiently protected credentials
7.5CVSS 3.1 base score, v2 5.0
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a certain live_?.shtml page with the variable syspasswd). Affected Devices: Wavlink WN530HG4, Wavlink WN531G3, and Wavlink WN572HG3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Roni-Carta/nyra Not ApplicableThird Party Advisory
https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972 Third Party Advisory
https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972-affected_devices Third Party Advisory
https://github.com/sudo-jtcsec/Nyra Broken Link
https://github.com/Roni-Carta/nyra Not ApplicableThird Party Advisory
https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972 Third Party Advisory
https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10972-affected_devices Third Party Advisory
https://github.com/sudo-jtcsec/Nyra Broken Link

Track CVE-2020-10972 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2022-40622Wavlink wn531g3 firmware improper authentication vulnerabilityThe WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens.…EPSS 0.74%8.8CVE-2022-40623Wavlink wn531g3 firmware cross-site request forgery vulnerabilityThe WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issu…EPSS 0.69%8.7CVE-2024-10194Wavlink wn530h4 firmware stack-based buffer overflow vulnerabilityA vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto…EPSS 1.2%8.6CVE-2024-10429Wavlink wn530h4 firmware command injection vulnerabilityA vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the function set_ipv6 of …EPSS 18%8.6CVE-2024-10428Wavlink wn530h4 firmware command injection vulnerabilityA vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affects the function se…EPSS 15%7.5CVE-2022-40621Wavlink wn531g3 firmware authentication bypass by capture-replay vulnerabilityBecause the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because t…EPSS 0.84%7.5CVE-2020-10974Wavlink wl-wn575a3 firmware missing authentication for critical function vulnerabilityAn issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, includi…EPSS 1.7%7.5CVE-2020-10973Wavlink wn530hg4 firmware missing authentication for critical function vulnerabilityAn issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a cr…EPSS 7.6%

Source: NIST National Vulnerability Database (record CVE-2020-10972), CISA KEV, FIRST EPSS (scores of 2026-10-18). This page is refreshed as NVD updates the record.