The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software relates to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

TOTOLINK EX200 getWiFiExtenderConfig Method Information Disclosure Vulnerability

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from an information disclosure vulnerability that stems from improper...

CVE-2024-31812

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...

CVE-2024-31812: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...

CVE-2024-31812

The TOTOLINK EX200 wireless N range extender, specifically version 4.0.3c.7646_B20201211 , is susceptible to an information disclosure vulnerability. The root cause is improper privilege management within the getWiFiExtenderConfig function. A malicious actor can exploit this flaw to obtain sensit...