Description
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.
Critical · 9.8
CVE-2024-42967
EUVD-2024-39848GHSA-6cg9-52c8-r76r
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains t…
Published Aug 15, 2024 · Updated Mar 13, 2025 · Assigned by mitre