CVE-2021-35326

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R router version 4.1.5cu.470 B20200911

Description: A vulnerability in the TOTOLINK A720R router allows attackers to download the configuration file by sending a crafted HTTP request.

Recommendations: For TOTOLINK A720R router version 4.1.5cu.470 B20200911, consider restricting access to the HTTP request handling mechanism until a patch is available. As a temporary workaround, limit the exposure of the router to untrusted networks to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.