CVE-2019-15654

Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management…

published March 19, 2020

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the DBconfig.cfg file. At the end of the file, the login information is stored in cleartext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01586 · 75.4th percentile
Published
2020-03-19T17:18Z
EPSS history
Timeline
  • 19 MAR 17:18Z
    Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management…
    cvelistv5