CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language makes it possible to reach "unknown functionality" in a "known to be easy" manner via an unspecified "public exploit."

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-12-09

Last modified

2024-08-04

Weaknesses

CWE-425

Affected products

• Rt-ac88u Firmware (Asus)

References

• https://vuldb.com/?id.165677