PT-2023-24984 · Techview · Techview La-5570 Wireless Gateway
CVE-2023-34723
·
Publicado
2023-08-25
·
Atualizado
2023-09-09
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
TechView LA-5570 Wireless Gateway version 1.0.19 T53
Description
An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing attackers to gain sensitive information via the "/config/system.conf" API endpoint.
Recommendations
For TechView LA-5570 Wireless Gateway version 1.0.19 T53, as a temporary workaround, consider restricting access to the "/config/system.conf" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Techview La-5570 Wireless Gateway