Description
Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET request for password.htm.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- TOTOLINK A3002RU 1.0.8 - Information Disclosure http/cves/2018/CVE-2018-13317.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.