critical9.8
CVE-2024-42966
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the…
Impact
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | N350rt Firmware | Version 9.3.5u.6139_b20201216 |