The vulnerability allows an attacker on the local network to invoke the /cgi-bin/skk_get.cgi endpoint without any authentication and receive a JSON payload containing the router's full configuration, including administrator credentials, WiFi keys, PPPoE and DDNS credentials, and a map of connected devices. This results in an Information Disclosure attack, granting attackers access to all sensitive credentials and device information, effectively enabling account takeover and further lateral movement within the network. The issue results in an Information Disclosure flaw, though the specific CWE is not listed in the record.

Netis AC1200 Router NC21, firmware 4.0.1.4296

The attack vector is a local network access; any device connected to the LAN can trigger the exploit in a single HTTP GET request. Because the endpoint is publicly accessible and requires no credentials, the exploit is trivial to execute as long as the attacker has LAN presence. Severity and exploit probability metrics are missing, but the exposure of administrative credentials and network topology represents a high-risk security event. The vulnerability is not listed in the CISA KEV catalog, and no EPSS score is available, so the current exploitation likelihood cannot be quantified.