Unspecified Vulnerability in Comba Telecom AP2600-I

Comba Telecom AP2600-I is a wireless access point device from Comba Telecom India. A security vulnerability exists in the upcfgAction.php file in Comba Telecom AP2600-I devices A02,0202N00PD2 and earlier versions, which can be exploited by a remote attacker with the help of a specially crafted...

CVE-2019-15654: Missing Authentication for Critical Function

Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the DBconfig.cfg file. At the end of the file, the login...