Dlink: >> Dsl-124 Security Vulnerabilities
D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing sensitive network credentials and system configurations.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-12-22