PT-2020-13049

CVE-2020-12123

·

Published

2020-10-02

·

Updated

2020-10-08

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403
Description The issue allows an attacker to remotely access router endpoints due to the lack of CSRF tokens in the /cgi-bin/ directory. This can be exploited if a user is authenticated in the router portal.
Recommendations For WAVLINK WN530H4 M30H4.V5030.190403, consider restricting access to the /cgi-bin/ directory until a patch is available. As a temporary workaround, avoid using the router portal when connected to untrusted networks to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾