An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2018-12-01T03:00:00Z
Updated: 2024-09-17T01:01:34.084Z
Reserved: 2018-01-02T00:00:00
Link: CVE-2018-3949
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-12-01T03:29:00.203
Modified: 2023-02-03T18:27:23.633
Link: CVE-2018-3949
Redhat
No data.