CVE-2024-31815

In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2024-04-08

Last modified

2024-10-28

Weaknesses

CWE-639

Affected products

• Ex200 Firmware (Totolink)

References

• https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_ExportSettings/Leak.md