Wr1210M
Monthly
The backup endpoint on LB-Link WR1210M firmware 1.0.3 exposes device configuration data to unauthenticated adjacent-network attackers due to missing authentication in the main() function of /www/cgi-bin/backup.cgi. Any attacker on the same local network segment can retrieve the router's backup archive without credentials, potentially obtaining Wi-Fi passphrases, administrative passwords, and network configuration. No public exploit has been identified at time of analysis, and the vendor did not respond to responsible disclosure, leaving no patch available.
The backup endpoint on LB-Link WR1210M firmware 1.0.3 exposes device configuration data to unauthenticated adjacent-network attackers due to missing authentication in the main() function of /www/cgi-bin/backup.cgi. Any attacker on the same local network segment can retrieve the router's backup archive without credentials, potentially obtaining Wi-Fi passphrases, administrative passwords, and network configuration. No public exploit has been identified at time of analysis, and the vendor did not respond to responsible disclosure, leaving no patch available.