CVE:CVE-2020-10974
CNNVD:CNNVD-202005-273
Wavlink WAVLINK WL-WN579G3和WL-WN575A3都是中国睿因科技（Wavlink）公司的一款无线网络信号扩展器。
WAVLINK WL-WN579G3 - M79X3.V5030.180719版本和WL-WN575A3 - RPT75A3.V4300.180801版本中的备份功能存在安全漏洞。攻击者可借助特制的POST请求利用该漏洞获取设备明文形式的当前配置，包括：管理员密码。
solution:Upgrade wavlink wl-wn575a3_firmware to a higher version than rpt75a3.v4300.180801,and avoid the version rpt75a3.v4300.180801; Upgrade wavlink wl-wn579g3_firmware to a higher version than m79x3.v5030.180719,and avoid the version m79x3.v5030.180719; Upgrade wavlink wn531a6_firmware to a higher version than -; Upgrade wavlink wn535g3_firmware to a higher version than -; Upgrade wavlink wn530h4_firmware to a higher version than -; Upgrade wavlink wn57x93_firmware to a higher version than -; Upgrade wavlink wn572hg3_firmware to a higher version than -; Upgrade wavlink wn575a4_firmware to a higher version than -; Upgrade wavlink wn578a2_firmware to a higher version than -; Upgrade wavlink wn579g3_firmware to a higher version than -; Upgrade wavlink wn579x3_firmware to a higher version than -; Upgrade wavlink jetstream_ac3000_firmware to a higher version than -; Upgrade wavlink jetstream_erac3000_firmware to a higher version than -