CVE-2019-25227

Name of the Vulnerable Software and Affected Versions Tellion HN-2204AP routers (affected versions not specified)

Description Tellion HN-2204AP routers have an issue where the /cgi-bin/system config file management endpoint allows remote retrieval of a compressed configuration archive without authentication or authorization. The exposed configuration may contain administrative credentials, wireless keys, and other sensitive settings. This could allow an unauthenticated attacker to obtain information that could facilitate further compromise of the device or network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.