CVE-2024-31815

An attacker sends an HTTP request directly to the /cgi-bin/ExportSettings.sh endpoint, which does not require any authentication. This script returns the device configuration file without verifying the identity of the requester. The vulnerability is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), which indicates a lack of proper access control to the resource.

An attacker can obtain the complete device configuration file, which may contain passwords, network keys, and other sensitive data, leading to compromise of confidentiality and integrity of the network environment.

Patches available from the manufacturer should be applied according to the references provided. Until an update is applied, it is recommended to restrict access to the device's administrative interface only to trusted hosts and implement network segmentation to prevent access to the management panel from external sources.

TOTOLINK EX200 with firmware version V4.0.3c.7314_B20191204