CVE-2020-35758

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface. This interface does not properly restrict access to internal functionality. Despite presenting a password login page on first access, authentication is not required to access privileged functionality. As such, it's possible to directly access APIs that should not be exposed to an unauthenticated user.

• CWE-306

• https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/Exploit, Third Party Advisory
• https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/Exploit, Third Party Advisory

Published

May 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35752Baby Care System 1.0 is affected by a cross-site scripting (…5.4
• CVE-2020-35753The job posting recommendation form in Persis Human Resource…6.1
• CVE-2020-35754OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an a…7.2
• CVE-2020-35755An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…7.5
• CVE-2020-35756An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…7.5
• CVE-2020-35757An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…9.8
• CVE-2020-35759bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads…6.5
• CVE-2020-35760bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload…9.8
• CVE-2020-35761bloofoxCMS 0.5.2.1 is infected with XSS that allows remote a…5.4
• CVE-2020-35762bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'f…2.7
• CVE-2020-35765doFilter in com.adventnet.appmanager.filter.UriCollector in …8.8
• CVE-2020-35766The test suite in libopendkim in OpenDKIM through 2.10.3 all…7.8