Security Advisory

CVE-2018-3949

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-01 03:00:00

Last updated 2024-09-17 01:01:34

Assigner talos

CVSS score 7.5

State PUBLISHED

Description

An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗