Vulnerabilities > Wavlink > Wn575A4 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-05-07 CVE-2020-10974 Missing Authentication for Critical Function vulnerability in Wavlink products
An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password.
network
low complexity
wavlink CWE-306
5.0