This vulnerability is an Incorrect Access Control in the WAVLINK WN530H4 router.
Otherwise known as an Authentication Bypass Vulnerability, this vulnerability allowed an unauthenticated user to access arbitrary endpoints in /cgi-bin/ without being logged into the router interface. The following endpoints were vulnerable to this error:
/cgi-bin/ExportAllSettings.sh/cgi-bin/ExportLogs.sh/cgi-bin/live_api.cgi/cgi-bin/makeRequest.cgi
The endpoint /cgi-bin/adm.cgi was not vulnerable to this attack.
References: NVD entry for CVE-2020-12126