Strik3R0X1

An access control issue in the component /cgi-bin/ExportLogs.sh allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.

An access control issue allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.

The issue is related to an access control problem in the "/cgi-bin/ExportLogs.sh" component, allowing unauthenticated attackers to download configuration data, log files, and obtain admin credentials.

The issue allows for Unrestricted File Upload via a crafted php file.

The issue is related to Cross-site Scripting (XSS) via the "/network test.php" API endpoint. This allows for potential malicious script injection and execution. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue allows unauthenticated attackers to download configuration data and log files due to an access control problem.