Description
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.
Critical · 9.8
CVE-2024-42966
EUVD-2024-39847GHSA-p332-vhv3-xv9m
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains …
Published Aug 15, 2024 · Updated Oct 24, 2024 · Assigned by mitre