CVE-2020-27368

CVE-2020-27368 affects TOTOLINK A702R router firmware (V1.0.0-B20161227.1023). The issue is Directory Indexing in the Login Portal, enabling access to /icons/ via a GET parameter. Root cause as described: improper directory exposure through the login portal. Impact per CVE entry is partial confid...