CVE-2020-12127

HighPublished

An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak...

Published: Oct 2, 2020
Updated: Aug 4, 2024
Assigning CNA: mitre

Primary CVSS

7.5/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS probability estimate

7.4%

Low · next 30 days

Percentile: 94.4%
Model date: Nov 3, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Template

WAVLINK WN530H4 M30H4.V5030.190403 - Information DisclosureTemplate
http/cves/2020/CVE-2020-12127.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: 6f886171c0a2Related tool
Declared conditions
- network: http($.protocol_keys)
- verification: status,word($.matchers[*].type)

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.