What’s Vulnerable › Vulnerabilities

CVE-2020-10974

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-07 · updated 2026-06-17
• Weakness: CWE-306

Description

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000

Affected products

• Wavlink Jetstream Ac3000 Firmware: all versions
• Wavlink Jetstream Erac3000 Firmware: all versions
• Wavlink Wl-Wn575A3 Firmware: rpt75a3.v4300.180801
• Wavlink Wl-Wn579G3 Firmware: m79x3.v5030.180719
• Wavlink Wn530H4 Firmware: all versions
• Wavlink Wn531A6 Firmware: all versions
• Wavlink Wn535G3 Firmware: all versions
• Wavlink Wn572Hg3 Firmware: all versions
• Wavlink Wn575A4 Firmware: all versions
• Wavlink Wn578A2 Firmware: all versions
• Wavlink Wn579G3 Firmware: all versions
• Wavlink WN579X3: all versions
• Wavlink Wn57X93 Firmware: all versions

References

• https://github.com/Roni-Carta/nyra
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974-affected_devices
• https://github.com/sudo-jtcsec/Nyra
• https://github.com/Roni-Carta/nyra
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974-affected_devices
• https://github.com/sudo-jtcsec/Nyra

Get alerted when CVE-2020-10974 or the next vulnerability affects your stack