Описание
A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:wavlink:wl-wn531g3_firmware:a42w-1.27.6-20180418:*:*:*:*:*:*:*
cpe:2.3:h:wavlink:wl-wn531g3:-:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.26366
Средний
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-306
Связанные уязвимости
CVSS3: 7.5
github
почти 4 года назад
A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router.
EPSS
Процентиль: 96%
0.26366
Средний
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-306