CVE-2020-12127

7.5 highEPSS 7.4%

High (7.5) in wavlink wn530h4 firmware. EPSS 7.4% chance of exploitation in the next 30 days.

An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 7.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2020-10-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wavlink:wn530h4_firmware

References

https://cerne.xyz/bugs/CVE-2020-12127
https://www.wavlink.com/en_us/product/WL-WN530H4.html
https://cerne.xyz/bugs/CVE-2020-12127
https://www.wavlink.com/en_us/product/WL-WN530H4.html

Check your stack JSON