NetSight
medium6.1

CVE-2018-13317

Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET requ…

Impact

Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET request for password.htm.

Affected products

VendorProductAffected versions
TotolinkA3002ru Firmware
Version 1.0.8

Weakness classification

References