जमा करें #563430: TOTOLINK A720R V4.1.5cu.374 Improper Access Controlsजानकारी

शीर्षकTOTOLINK A720R V4.1.5cu.374 Improper Access Controls
विवरणThe TOTOLINK A720R V4.1.5cu.374 firmware contains an unauthenticated diagnostic log clearing vulnerability. An attacker can exploit this flaw by sending a crafted POST request with the parameter {"topicurl":"clearDiagnosisLog"} to /cgi-bin/cstecgi.cgi, allowing unauthorized clearing of system diagnostic logs without authentication.
स्रोत⚠️ https://github.com/at0de/my_vulns/blob/main/TOTOLINK/A720R/clearDiagnosisLog.md
उपयोगकर्ता
 153528990 (UID 64409)
सबमिशन22/04/2025 03:48 AM (1 वर्ष पहले)
संयम04/05/2025 08:24 PM (13 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि307373 [TOTOLINK A720R 4.1.5cu.374 Log /cgi-bin/cstecgi.cgi topicurl अधिकार वृद्धि]
अंक19

Do you know our Splunk app?

Download it now for free!