Vuln ID: CVE-2020-29138

Published:  2020-11-27  16:15:11Z

Description: Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.

Source: NVD.NIST.GOV