Vulnerabilities > Sagemcom > F ST 3486 Router Firmware > 4.109.0

DATE CVE VULNERABILITY TITLE RISK
2020-11-27 CVE-2020-29138 Missing Authentication for Critical Function vulnerability in Sagemcom F@St 3486 Router Firmware 4.109.0
Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.
network
low complexity
sagemcom CWE-306
5.3