critical9.1
CVE-2024-31815
In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh
Impact
In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Ex200 Firmware | Version 4.0.3c.7646_b20201211 |