CVE-2020-10973

An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform a decryption step, but all decryption information is readily available.

• CWE-306

• https://github.com/Roni-Carta/nyraNot Applicable, Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devicesThird Party Advisory
• https://github.com/sudo-jtcsec/NyraBroken Link
• https://github.com/Roni-Carta/nyraNot Applicable, Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10973-affected_devicesThird Party Advisory
• https://github.com/sudo-jtcsec/NyraBroken Link

Published

May 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10967In Dovecot before 2.3.10.1, remote unauthenticated attackers…5.3
• CVE-2020-10968FasterXML jackson-databind 2.x before 2.9.10.4 mishandles th…8.8
• CVE-2020-10969FasterXML jackson-databind 2.x before 2.9.10.4 mishandles th…8.8
• CVE-2020-1097<p>An information disclosure vulnerability exists when the W…6.5
• CVE-2020-10971An issue was discovered on Wavlink Jetstream devices where a…8.8
• CVE-2020-10972An issue was discovered where a page is exposed that has the…7.5
• CVE-2020-10974An issue was discovered affecting a backup feature where a c…7.5
• CVE-2020-10975GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments o…4.3
• CVE-2020-10976GitLab EE/CE 8.17 to 12.9 is vulnerable to information leaka…7.5
• CVE-2020-10977GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversa…5.5
• CVE-2020-10978GitLab EE/CE 8.11 to 12.9 is leaking information on Issues o…5.3
• CVE-2020-10979GitLab EE/CE 11.10 to 12.9 is leaking information on restric…4.3