CVE-2020-12123: CSRF
CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If a user is authenticated in the router portal, then this attack will work.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12123?
The severity of CVE-2020-12123 is high.
What is the vulnerability ID for the CSRF vulnerabilities in the WAVLINK WN530H4 M30H4.V5030.190403?
The vulnerability ID is CVE-2020-12123.
How can an attacker exploit the CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403?
An attacker can remotely access router endpoints by exploiting the CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403.
Are authenticated users in the router portal affected by the CSRF vulnerabilities?
Yes, if a user is authenticated in the router portal, they can be affected by the CSRF vulnerabilities.
How can the CSRF vulnerabilities be fixed in the WAVLINK WN530H4 M30H4.V5030.190403 router?
To fix the CSRF vulnerabilities, it is recommended to implement CSRF tokens in the endpoints of the /cgi-bin/ directory in the WAVLINK WN530H4 M30H4.V5030.190403 router.