Lucene search
PRIOn knowledge basePRION:CVE-2018-3949HistoryDec 01, 2018 - 3:29 a.m.
Information disclosure
2018-12-0103:29:00
PRIOn knowledge base
www.prio-n.com
5
An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tl-r600vpn_firmware | eq | 1.3.0 | |
| tl-r600vpn_firmware | eq | 1.2.3 |
Related
cve
cve
CVE-2018-3949
2018-12-01 03:29:00
talos
talos
TP-Link TL-R600VPN HTTP server information disclosure vulnerability
2018-11-19 00:00:00
attackerkb
attackerkb
CVE-2018-3949
2018-12-01 00:00:00
nvd
nvd
CVE-2018-3949
2018-12-01 03:29:00
cvelist
cvelist
CVE-2018-3949
2018-11-19 00:00:00
openvas
openvas
TP-Link Wi-Fi Routers Multiple Vulnerabilities
2018-11-20 00:00:00
talosblog
talosblog