VULNERABILITY INTELLIGENCE

CVE-2020-35758

CVSS score9.8 CRITICAL
EPSS probability1.57%
CISA KEVNot currently listed
Published2021-05-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface. This interface does not properly restrict access to internal functionality. Despite presenting a password login page on first access, authentication is not required to access privileged functionality. As such, it's possible to directly access APIs that should not be exposed to an unauthenticated user.

Weakness classification

  • CWE-306: Missing Authentication for Critical Function

Primary references