CVE-2022-34572

MEDIUM Year: 2022
CVSS v3 Score
5.7
Medium
Weakness Type
CWE-425
View all →

Vulnerability Description

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page tftp.txt.

Related Vulnerabilities

CVE-2022-34574

MEDIUM
CVSS:5.7(Medium)

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tftpd32.ini.

CWE-4252022

CVE-2021-28150

MEDIUM
CVSS:5.5(Medium)

Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.

CWE-4252021

CVE-2004-2257

MEDIUM
CVSS:5.3(Medium)

phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.

CWE-4252004

CVE-2005-1688

MEDIUM
CVSS:5.3(Medium)

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in ...

CWE-4252005

CVE-2016-1000111

MEDIUM
CVSS:5.3(Medium)

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PRO...

CWE-4252016

CVE-2017-2139

MEDIUM
CVSS:5.3(Medium)

CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to bypass access restriction ...

CWE-4252017