Vulnerability — CVE-2018-3949

CVE-2018-3949

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2018-3949
Description:: An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability.
Last updated date:: 02/03/2023

ACTIVELY EXPLOITED

Type:: exploitation
Confidence:: HIGH
Date of publishing:: 11/11/2021
Reference url to background: https://www.marketscreener.com/quote/stock/CHECK-POINT-SOFTWARE-TECH-4858/news/October-2021-s-Most-Wanted-Malware-Trickbot-Takes-Top-Spot-for-Fifth-Time-36983789/

Type:: exploitation
Confidence:: HIGH
Date of publishing:: 12/31/2021
Reference url to background: https://blog.checkpoint.com/2022/01/12/december-2021s-most-wanted-malware-trickbot-emotet-and-the-log4j-plague/

Type:: exploitation
Confidence:: HIGH
Date of publishing:: 06/09/2022
Reference url to background: https://www.bloomberg.com/press-releases/2022-06-09/may-2022-s-most-wanted-malware-snake-keylogger-returns-to-the-top-ten-after-a-long-absence

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/27/2018
Reference url to background: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0618