CVE:CVE-2020-12266
CNNVD:CNNVD-202004-2182
Wavlink wavlink是中国睿因科技（Wavlink）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
Wavlink 多款产品中存在访问控制错误漏洞，该漏洞源于一些可以从外部访问的页面没有任何身份验证并且存储有系统信息。攻击者可利用该漏洞获取信息，包括：设备IP地址，设备的MAC地址，当前固件版本，位置，该路由器范围内其他无线网络。以下产品及版本受到影响：WL-WN579G3 M79X3.V5030.180719版本、WL-WN575A3 RPT75A3.V4300.180801版本和WL-WN530HG4 M30HG4.V5030.191116版本。
solution:Upgrade wavlink wl-wn579g3_firmware to a higher version than m79x3.v5030.180719,and avoid the version m79x3.v5030.180719; Upgrade wavlink wl-wn575a3_firmware to a higher version than rpt75a3.v4300.180801,and avoid the version rpt75a3.v4300.180801; Upgrade wavlink wl-wn530hg4_firmware to a higher version than m30hg4.v5030.191116,and avoid the version m30hg4.v5030.191116; Upgrade wavlink wn531g3_firmware to a higher version than -; Upgrade wavlink wn533a8_firmware to a higher version than -; Upgrade wavlink wn531a6_firmware to a higher version than -; Upgrade wavlink wn551k1_firmware to a higher version than -; Upgrade wavlink wn535g3_firmware to a higher version than -; Upgrade wavlink wn530h4_firmware to a higher version than -; Upgrade wavlink wn57x93_firmware to a higher version than -; Upgrade wavlink wn578a2_firmware to a higher version than -; Upgrade wavlink wn579g3_firmware to a higher version than -; Upgrade wavlink wn579x3_firmware to a higher version than -; Upgrade wavlink jetstream_ac3000_firmware to a higher version than -; Upgrade wavlink jetstream_erac3000_firmware to a higher version than -