Enviar #521570: TOTOLINK A3000RU A3000RU_Firmware V5.9c.5185 Improper Access Controls
| Título | TOTOLINK A3000RU A3000RU_Firmware V5.9c.5185 Improper Access Controls |
|---|---|
| Descripción | In TOTOLINK A3000RU_Firmware V5.9c.5185, an attacker can obtain the syslog configuration file without authorization through /cgi-bin/ExportSyslog.sh. When making a request to /cgi-bin/ExportSyslog.sh, the attacker can obtain the syslog configuration file syslog--xxxxxxxx.dat without authorization. |
| Fuente | ⚠️ https:/ |
| Usuario | wxhwxhwxh_mie (UID 66748) |
| Sumisión | 2025-03-17 08:48 (hace 2 años) |
| Moderación | 2025-03-23 10:31 (6 days later) |
| Estado | Aceptado |
| Entrada de VulDB | 300709 [TOTOLINK A3000RU hasta 5.9c.5185 Syslog Configuration File /cgi-bin/ExportSyslog.sh escalada de privilegios] |
| Puntos | 15 |