Security Advisory

CVE-2024-42966

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-15 00:00:00
Last updated 2024-10-24 19:47:54
Assigner mitre
State PUBLISHED

Description

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.