← Back to browse · API

CVE-2024-31817

Severity

HIGH

CVSS

7.5

EPSS

0.5534

Risk score

49.37

CISA KEV

No

PoC

No

Published

2024-04-08

Modified

2024-08-02

First seen

2026-08-08

Aliases

EUVD-2024-29690, GHSA-H8J8-56G9-735M

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-29690

Description

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg.

References