Approved changes feed: RSS · Atom

cpe:2.3:h:wavlink:wn575a4:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductWn575A4 (fa495525-12e4-5d90-a1f7-51bb85a3e0d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13117 not_vulnerable 2026-06-08 05:18:00.189800 Details available
Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.
Published: 2021-02-09T18:53:18.000Z
Updated: 2025-08-19T13:24:22.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10974 not_vulnerable 2026-06-08 05:16:36.153280 Details available
An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, Wavlink WN572HG3, Wavlink WN575A4, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000
Published: 2020-05-07T17:42:57.000Z
Updated: 2024-08-04T11:21:14.401Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.