Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the DBconfig.cfg file. At the end of the file, the login information is stored in cleartext.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Comba Telecom AC2400 访问控制错误漏洞
Vulnerability Description
Comba Telecom AC2400是中国香港京信通信（Comba Telecom）公司的一款无线访问控制器。 Comba Telecom AC2400中的upcfgAction.php文件存在安全漏洞。远程攻击者可借助特制请求利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A