Medium · 6.5 CVE-2024-31812 EUVD-2024-29685GHSA-pw86-gvc3-5wvh

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiEx…

Published Apr 8, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.

References

https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getWiFiExtenderConfig/Leak.md