ID |
CVE-2024-7170
|
Sažetak |
A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /web_cste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272591. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
Reference |
|
CVSS |
Base: | 2.7 |
Impact: | 2.9 |
Exploitability: | 5.1 |
|
Pristup |
Vektor | Složenost | Autentikacija |
ADJACENT_NETWORK |
LOW |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
PARTIAL |
NONE |
NONE |
|
CVSS vektor |
AV:A/AC:L/Au:S/C:P/I:N/A:N |
Zadnje važnije ažuriranje |
08-08-2024 - 12:46 |
Objavljeno |
28-07-2024 - 22:15 |