CVE-2019-25227

Tellion HN-2204AP routers contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/systemconfigfile management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration...

EUVD-2019-19376

Tellion HN-2204AP routers contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/systemconfigfile management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration...

CVE-2019-25227 Tellion HN-2204AP Unauthenticated Configuration Disclosure

Tellion HN-2204AP routers contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/systemconfigfile management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration...

PT-2025-48190

Name of the Vulnerable Software and Affected Versions Dongyoung Media DM-AP240T/W affected versions not specified Description Dongyoung Media DM-AP240T/W wireless access points have an issue where the /cgi-bin/sys system config API endpoint allows remote retrieval of a configuration archive witho...

Dongyoung DM-AP240T/W 访问控制错误漏洞

The Dongyoung DM-AP240T/W is a wireless access point device from Dongyoung Corporation in South Korea. An access control error vulnerability exists in the Dongyoung DM-AP240T/W that originates in the /cgi-bin/syssystemconfig management endpoint to remotely retrieve a compressed configuration...

Tellion HN-2204AP 访问控制错误漏洞

The Tellion HN-2204AP is a wireless access point device from Tellion. An access control error vulnerability exists in the Tellion HN-2204AP that originates in the /cgi-bin/systemconfigfile management endpoint to remotely retrieve a compressed configuration archive without authentication, which...

CVE-2021-27857

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unauthenticated attacker to download a configuration archive. The attacker needs to know or correctly guess the hostname o...