Comfast CF-WR632AX router path traversal via multipart filename
Anyone can open internal files on Comfast routers!
Summary
The multipart parser in Comfast CF-WR632AX router firmware lets a remote attacker escape intended paths by manipulating the filename argument. A public exploit exists, and the vendor did not respond to early disclosure.
What to do
Update these devices now!
- Comfast CF-WR632AX
Products and platforms
CVE IDs
Sources
- Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
- Repository: github.com (opens in a new tab)
Times
First published
First seen