An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to…
mitre·CWE-425·Published 2020-12-09
An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language makes it possible to reach "unknown functionality" in a "known to be easy" manner via an unspecified "public exploit."
An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language makes it possible to reach "unknown functionality" in a "known to be easy" manner via an unspecified "public exploit."
Se presenta una vulnerabilidad de divulgación de información en RT-AC88U Download Master versiones anteriores a 3.1.0.108. Un acceso directo a /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language hace posible alcanzar una "unknown functionality" de una manera "known to be easy" por medio de un "public exploit" no especificado
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 2.0 | Primary | NVD | 5.0 | 10.0 | 2.9 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| 3.1 | Primary | NVD | 7.5 | 3.9 | 3.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |