Search vulnerabilities

Results 1

Export CSV
CVE-2023-53974

D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request

D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing sensitive network credentials and system configurations.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors