Vulnerability in N/a

CVE-2024-31817

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg.

EPSS: 0.553 (98.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getSysStatusCfg/Leak…

Frequently asked questions

What is CVE-2024-31817?: CVE-2024-31817 is a vulnerability in N/a. Published 2024-04-08.
Is CVE-2024-31817 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.