CVE-2024-42966

Publication date

2024-08-15 00:00:00

Family

mitre

State

PUBLISHED

Description

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.