CVE-2020-29138

2020-11-2715:07:58

mitre

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.