CVE-2020-12123

HIGH

WAVLINK WN530H4 M30H4.V5030.190403 - Cross-Site Request Forgery in /cgi-bin/ Directory

Title source: llm

Description

CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If a user is authenticated in the router portal, then this attack will work.

References (2)

Core 2

Core References

Product, Vendor Advisory x_refsource_misc

https://www.wavlink.com/en_us/product/WL-WN530H4.html

Third Party Advisory x_refsource_misc

https://cerne.xyz/bugs/CVE-2020-12123

Scores

CVSS v3 8.1

EPSS 0.0014

EPSS Percentile 33.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

wavlink/wn530h4_firmware m30h4.v5030.190403

Published Oct 02, 2020

Tracked Since Feb 18, 2026