CVE-2020-13117

Critical

Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key…

mitre·CWE-77·Published 2021-02-09

CVSS

9.8

EPSS

0.69

KEV

Exploits

cve.orgen

161 chars

Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.

NVDen

161 chars

Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.

Los dispositivos Wavlink WN575A4 y WN579X3 versiones hasta 15-05-2020, permiten a usuarios remotos no autenticados inyectar comandos por medio del parámetro key en una petición de inicio de sesión

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H