CVE-2024-7156

CWE-200 — Information Exposure3 documents3 sources
Severity
6.9MEDIUM
EPSS
8.7%
top 7.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink A3700rTotolink A3700r Firmware
Timeline
PublishedJul 28

Description

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/ExportSettings.sh of the component apmib Configuration Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272570 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclo…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5totolink/a3700r9.1.2u.5822_B20200513
▶NVDtotolink/a3700r_firmware9.1.2u.5822_b20200513

🔴Vulnerability Details

2
GHSA
GHSA-4pvc-vf8h-5h32: A vulnerability was found in TOTOLINK A3700R 9↗2024-07-28
▶
CVEList
TOTOLINK A3700R apmib Configuration ExportSettings.sh information disclosure↗2024-07-28
▶
CVE-2024-7156 (MEDIUM CVSS 6.9) | A vulnerability was found in TOTOLI | cvebase.io