CVE-2020-29138

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to…

published November 27, 2020

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01130 · 66.1th percentile
Published
2020-11-27T15:07Z
EPSS history
Timeline
  • 27 NOV 15:07Z
    Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to…
    cvelistv5