| |
Vulnerability CVE-2024-42967
Published: 2024-08-15
| Description: |
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh. |
References: |
https://github.com/TTTJJJWWW/AHU-IoT-vulnerable/blob/main/TOTOLINK/LR350/ExportSettings.md
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
