CVE-2020-10974

An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000

• CWE-306

• https://github.com/Roni-Carta/nyraNot Applicable, Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974-affected_devicesThird Party Advisory
• https://github.com/sudo-jtcsec/NyraBroken Link
• https://github.com/Roni-Carta/nyraNot Applicable, Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974Third Party Advisory
• https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10974-affected_devicesThird Party Advisory
• https://github.com/sudo-jtcsec/NyraBroken Link

Published

May 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10968FasterXML jackson-databind 2.x before 2.9.10.4 mishandles th…8.8
• CVE-2020-10969FasterXML jackson-databind 2.x before 2.9.10.4 mishandles th…8.8
• CVE-2020-1097<p>An information disclosure vulnerability exists when the W…6.5
• CVE-2020-10971An issue was discovered on Wavlink Jetstream devices where a…8.8
• CVE-2020-10972An issue was discovered where a page is exposed that has the…7.5
• CVE-2020-10973An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3…7.5
• CVE-2020-10975GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments o…4.3
• CVE-2020-10976GitLab EE/CE 8.17 to 12.9 is vulnerable to information leaka…7.5
• CVE-2020-10977GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversa…5.5
• CVE-2020-10978GitLab EE/CE 8.11 to 12.9 is leaking information on Issues o…5.3
• CVE-2020-10979GitLab EE/CE 11.10 to 12.9 is leaking information on restric…4.3
• CVE-2020-1098<p>An elevation of privilege vulnerability exists when the S…7.8