Vulnerability-Lookup

CNVD-2020-41783

Vulnerability from cnvd - Published: 2020-07-23

Title

多款WAVLINK产品输入验证错误漏洞

Description

WAVLINK WL-WN579G3等都是中国睿因科技（WAVLINK）公司的一款无线网络信号扩展器。 WAVLINK WL-WN579G3 M79X3.V5030.180719版本、WL-WN575A3 RPT75A3.V4300.180801版本和WL-WN530HG4 M30HG4.V5030.191116版本中存在安全漏洞。攻击者可借助特制的POST请求利用该漏洞执行代码。

Severity

高

Formal description

目前厂商暂未发布修复措施解决此安全问题，建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法：

https://www.wavlink.com/

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-10971

Impacted products

Name
['中国睿因科技（WAVLINK） WL-WN579G3 M79X3.V5030.180719', '中国睿因科技（WAVLINK） WL-WN575A3 RPT75A3.V4300.180801', '中国睿因科技（WAVLINK） WL-WN530HG4 M30HG4.V5030.191116']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-10971"
    }
  },
  "description": "WAVLINK WL-WN579G3\u7b49\u90fd\u662f\u4e2d\u56fd\u777f\u56e0\u79d1\u6280\uff08WAVLINK\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u65e0\u7ebf\u7f51\u7edc\u4fe1\u53f7\u6269\u5c55\u5668\u3002\n\nWAVLINK WL-WN579G3 M79X3.V5030.180719\u7248\u672c\u3001WL-WN575A3 RPT75A3.V4300.180801\u7248\u672c\u548cWL-WN530HG4 M30HG4.V5030.191116\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684POST\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u6682\u672a\u53d1\u5e03\u4fee\u590d\u63aa\u65bd\u89e3\u51b3\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u5efa\u8bae\u4f7f\u7528\u6b64\u8f6f\u4ef6\u7684\u7528\u6237\u968f\u65f6\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u6216\u53c2\u8003\u7f51\u5740\u4ee5\u83b7\u53d6\u89e3\u51b3\u529e\u6cd5\uff1a\r\n\r\nhttps://www.wavlink.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-41783",
  "openTime": "2020-07-23",
  "products": {
    "product": [
      "\u4e2d\u56fd\u777f\u56e0\u79d1\u6280\uff08WAVLINK\uff09 WL-WN579G3 M79X3.V5030.180719",
      "\u4e2d\u56fd\u777f\u56e0\u79d1\u6280\uff08WAVLINK\uff09 WL-WN575A3 RPT75A3.V4300.180801",
      "\u4e2d\u56fd\u777f\u56e0\u79d1\u6280\uff08WAVLINK\uff09 WL-WN530HG4 M30HG4.V5030.191116"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-10971",
  "serverity": "\u9ad8",
  "submitTime": "2020-05-08",
  "title": "\u591a\u6b3eWAVLINK\u4ea7\u54c1\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2020-10971 (GCVE-0-2020-10971)

Vulnerability from cvelistv5 – Published: 2020-05-07 17:54 – Updated: 2024-08-04 11:21

Summary

An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the same time. The POST request itself is not validated to ensure it came from the active session. Affected devices are: Wavlink WN530HG4, Wavlink WN575A3, Wavlink WN579G3,Wavlink WN531G3, Wavlink WN533A8, Wavlink WN531A6, Wavlink WN551K1, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, WN572HG3, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

4 references

URL	Tags
https://github.com/sudo-jtcsec/CVE/blob/master/CV…	x_refsource_MISC
https://github.com/sudo-jtcsec/CVE/blob/master/CV…	x_refsource_MISC
https://github.com/sudo-jtcsec/Nyra	x_refsource_MISC
https://github.com/Roni-Carta/nyra	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:21:14.469Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971-Affected_Devices"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/sudo-jtcsec/Nyra"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/Roni-Carta/nyra"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the same time. The POST request itself is not validated to ensure it came from the active session. Affected devices are: Wavlink WN530HG4, Wavlink WN575A3, Wavlink WN579G3,Wavlink WN531G3, Wavlink WN533A8, Wavlink WN531A6, Wavlink WN551K1, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, WN572HG3, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-04T19:20:02.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971-Affected_Devices"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sudo-jtcsec/Nyra"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Roni-Carta/nyra"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-10971",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the same time. The POST request itself is not validated to ensure it came from the active session. Affected devices are: Wavlink WN530HG4, Wavlink WN575A3, Wavlink WN579G3,Wavlink WN531G3, Wavlink WN533A8, Wavlink WN531A6, Wavlink WN551K1, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, WN572HG3, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971",
              "refsource": "MISC",
              "url": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971"
            },
            {
              "name": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971-Affected_Devices",
              "refsource": "MISC",
              "url": "https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-10971-Affected_Devices"
            },
            {
              "name": "https://github.com/sudo-jtcsec/Nyra",
              "refsource": "MISC",
              "url": "https://github.com/sudo-jtcsec/Nyra"
            },
            {
              "name": "https://github.com/Roni-Carta/nyra",
              "refsource": "MISC",
              "url": "https://github.com/Roni-Carta/nyra"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-10971",
    "datePublished": "2020-05-07T17:54:01.000Z",
    "dateReserved": "2020-03-26T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:21:14.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2020-41783

CVE-2020-10971 (GCVE-0-2020-10971)

Tags

Sightings

Nomenclature

Related by attack behaviour