critical9.8
CVE-2024-42967
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the …
Impact
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Lr350 Firmware | Version 9.3.5u.6369_b20220309 |