PT-2024-24225
CVE-2024-31817
·
Published
2024-04-08
·
Updated
2025-03-24
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
TOTOLINK EX200 version 4.0.3c.7646 B20201211
Description
The issue allows an attacker to obtain sensitive information without authorization through the function getSysStatusCfg.
Recommendations
For TOTOLINK EX200 version 4.0.3c.7646 B20201211, consider disabling the
getSysStatusCfg function until a patch is available to prevent unauthorized access to sensitive information. Found an issue in the description? Have something to add? Feel free to write us 👾