Security Advisory
CVE-2024-42966
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.