Beveiligingsadvies

CVE-2024-42967

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-15 00:00:00
Laatst bijgewerkt 2025-03-13 15:29:04
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.